[dns-operations] good one was Re: DNSSEC impact ...

[Joe Abley]

On 29 May 2008, at 14:08, Wes Hardaker wrote:

>>>>>>   "it says it can't connect; something about domain name not  
>>>>>> found".
>
> At that point the tech support guy has a multitude of potential  
> problems
> to chase down.  He wouldn't know if it's a network problem, a resolver
> problem, a application problem, a DNSSEC problem, a ....

More fundamentally, there are failure modes where a third party such  
as the tech support guy is not able to tell what the problem is. If  
the application and its surrounding OS can't tell the local user what  
happened, then in the general case, nobody will ever know for sure.


Joe