Hi Philip, > On 6 May 2026, at 15:57, Philip Homburg <[email protected]> wrote: > >> * The RR type carries information that is intended to be acted upon >> by a resolver during the process of following a referral, prior to >> sending queries to the authoritative servers for the delegated >> zone. > > Just to be clear. The way I read this, if we ever want a new DS type, then > this range cannot be used.
Good catch. This “prior to” criteria is too narrow. DS records are a good
example of records used after a referral is followed.
> A DS record does not contain any information that is acted upon prior to
> sending quesries to authoritative servers.
Ack.
> Is that correct? The draft contains multiple references to DS without making
> it clear that DS-like types are not supported.
I’ve revised it to:
* The RR type carries information that is intended to be acted upon
by a resolver during the process of following a referral. This
includes information used prior to sending queries to the
authoritative servers for the delegated zone, or after the
referral has been followed, such as material used to authenticate
a DNSKEY in the delegated zone.
Thanks Philip!
Roy
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ DNSOP mailing list -- [email protected] To unsubscribe send an email to [email protected]
