<html><head></head><body><div dir="auto">What I meant up that is that no authority operator can modify the root name space quietly. Anyone doing it will be outed here and possibly also in the press. Dnssec does not have to be seen by a stub in order to function as a canary. <br><br></div>
<div dir="auto">There was and remains no reason to think cloud flare would publish modified data. But if that somehow happened, there would be near instant awareness, and near global blowback. <br><br></div>
<div dir="auto">This may be the greatest value Dnssec yet provided to the world: assurance. <br><br></div>
<div dir="auto">Vixie<br><br></div>
<div dir="auto"><!-- tmjah_g_1299s -->Get <!-- tmjah_g_1299e --><a href="http://www.bluemail.me/r?b=14667"><!-- tmjah_g_1299s -->BlueMail for Android<!-- tmjah_g_1299e --></a><!-- tmjah_g_1299s --> <!-- tmjah_g_1299e --></div>
<div class="gmail_quote" >On 25 Mar 2019, at 17:46, "Ondřej Surý" <<a href="mailto:ondrej@sury.org" target="_blank">ondrej@sury.org</a>> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<pre class="blue">That doesn’t really matter in most common deployments (the servfail is from your recursor) - the end user will end up with a blank (error) page.<br><br>Ondrej<br>--<br>Ondřej Surý <ondrej@sury.org><br><br><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> On 25 Mar 2019, at 16:12, Tony Finch <dot@dotat.at> wrote:<br> <br> Ondřej Surý <ondrej@sury.org> wrote:<br> <br><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> Matt, there’s no difference between NXDOMAIN and SERVFAIL from the<br> client perspective.<br></blockquote> <br> One triggers a retry and the other doesn't.<br> <br> Tony.<br> -- <br> f.anthony.n.finch <dot@dotat.at> <a href="http://dotat.at">http://dotat.at</a>/<br> German Bight, Humber: Northwest 6 or 7, occasionally gale 8 at first,<br> decreasing 4 or 5. Rough or very rough, becoming moderate later. Showers.<br> Good.<br></blockquote><br><hr><br>dns-operations mailing list<br>dns-operations@lists.dns-oarc.net<br><a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a><br>dns-operations mailing list<br><a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a><br></pre></blockquote></div></body></html>