[dns-operations] attention yahoo, microsoft, wikipedia, akamai, and akamai customers

[Stephane Bortzmeyer]

Studying our www.afnic.fr (a CNAME with an out-of-zone RHS), and the
the queries received by our BIND nameserver ns3.nic.fr (which is
authoritative for both nic.fr and afnic.fr), we note that one third of
queries for www.afnic.fr are *not* followed by a query for
rigolo.nic.fr, the canonical name.

We can conclude that one third of the resolvers in the wild are not
paranoid enough. They accept out-of-zone data.