On Wed, Sep 17, 2014 at 11:09 AM, Jay Ashworth <j...@baylink.com> wrote:
> The latter would seem to be avoidable by making sure that *DNS resolution > of bare TLDs always returns NXDOMAIN*. [snip] Not NXDOMAIN. When TLD. is looked up, they should always return NOERROR. And yield, either (1) the NS records for the TLD, for QTYPE NS or 'ANY' For other queries TLD. should return NOERROR with Zero RRs in the answer (Empty response). A NXDOMAIN response would be declaring that the TLD does not exist. -- -JH
