> On Dec 28, 2015, at 2:30 PM, Paul Vixie wrote:
>
> i agree with this analysis.
>
> arguably, the moment we all agreed that DNSSEC's only purpose was to cause
> more resolution failures more often for more and new reasons, we ought to
> have said it can't be deployed and shouldn't be design
On Monday, December 28, 2015 09:43:01 AM Olafur Gudmundsson wrote:
...> In 1999 or 2000 we started seeing LoadBalancers that returned NXDOMAIN for
> any query other than A for a name. At the time the bind-9 team argued about
> what to do, I still think that the behavior selected was the wrong one i
In message , Olafur Gudmundsson
writes:
>
> > On Dec 27, 2015, at 11:40 PM, John Levine wrote:
> >
> >>> NEW
> >>> For instance, some authoritative name servers embedded in load
> >>> balancers reply properly to A queries but send REFUSED to NS
> queries.
> >>> This behaviour violates the
> On Dec 27, 2015, at 11:40 PM, John Levine wrote:
>
>>> NEW
>>> For instance, some authoritative name servers embedded in load
>>> balancers reply properly to A queries but send REFUSED to NS queries.
>>> This behaviour violates the DNS protocol (see Section ??? of [RFC??],
>>> and impr
