[as112-ops] draft to include more IPv4 reverse zone delegations
Paul Vixie
vixie at isc.org
Fri May 13 14:06:47 UTC 2011
> Date: Fri, 13 May 2011 14:46:42 +0100
> From: Nick Hilliard <nick at inex.ie>
>
> I think this is a great idea and am all for it, but it may need some
> explicit analysis in the ID of what's going to happen on AS112 nodes
> which are out of date and which don't serve these domains. e.g. that
> the NXDOMAIN returned (if it actually is returned) may be
> non-authoritative and ignored by the client.
true.
apropos of authoritativeness, i think it's time to start planning for
dnssec signing of AS112 zones. this would mean using a signing key for
which the "usually secret" part was published.
More information about the as112-ops
mailing list