Re: [DNSOP] draft-fujiwara-dnsop-nsec-aggressiveuse-01.txt

2015-10-25 Thread Paul Vixie
sanity check, someone? i believe that in dnssec, an empty non-terminal has a proof that the name exists, and a proof that there are no RR's. thus, vastly different from the signaling for NXDOMAIN. this ought to end, for all time, the debate about whether empty nonterminals exist or not. (there

Re: [DNSOP] draft-fujiwara-dnsop-nsec-aggressiveuse-01.txt

2015-10-25 Thread Stephane Bortzmeyer
On Sat, Oct 24, 2015 at 10:54:15PM +, P Vixie wrote a message of 73 lines which said: > To me this is a feature, possibly the most important feature. Specially now that Akamai's authoritative name servers properly handle ENTs: % dig A e8921.dscx.akamaiedge.net ; <<>> DiG 9.9.5-9+deb8u3-

[DNSOP] BIND implementation of draft-muks-dnsop-dns-message-checksums

2015-10-25 Thread Mukund Sivaraman
Hi all Ref: https://datatracker.ietf.org/doc/draft-muks-dnsop-dns-message-checksums/ A preliminary BIND implementation of DNS message checksums is here: https://github.com/muks/bind9/ .. in the "dns-message-checksums" branch. You can configure BIND as an authoritative server and play with it us