[dns-operations] Delegation checking (was: Re: Some DNSSEC trivia)

[Edward Lewis]

At 10:54 +0100 1/10/08, Patrik Wallstrom wrote:

>But how do you tell the difference between a registrant and a
>nameserver operator just handling the DNS for a registrant? You can't.
>
>So, could a registry contact SOA rname?

If the registrant wants to hide their outsourcing of DNS and does it 
right, you can't tell.

You can try various "forensic" tricks, like use BIND's query to 
reveal the host name or WhoIs the IP address of the server to detect 
something about the server, but ultimately, the quickest way to an 
answer is to call the number for the domain in WhoIs and just ask.

If they won't tell you, 1) you can try the forensics, 2) find a lowly 
paid IT grunt and get them into a bar, 3) realize that you've saved 
time trying to futilely find this out by doing the forensics.
-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Edward Lewis                                                +1-571-434-5468
NeuStar

Think glocally.  Act confused.