[dns-operations] DNS trust dependencies for TLDs

[Florian Weimer]

* Antoin Verschuren:

> The .nl zone is a delegation only zone. 

It's not. 8-)  _NICNAME._TCP.NL is a name for which the .nl servers answer
authoritatively.

; <<>> DiG 9.6.0-P1 <<>> @ns1.nic.nl. _nicname._tcp.nl srv +norecurse +dnssec
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21256
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 7, ADDITIONAL: 7

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;_nicname._tcp.nl.              IN      SRV

;; ANSWER SECTION:
_nicname._tcp.nl.       7200    IN      SRV     0 0 43 whois.domain-registry.nl.

;; AUTHORITY SECTION:
nl.                     86400   IN      NS      nl1.dnsnode.net.
nl.                     86400   IN      NS      sns-pb.isc.org.
nl.                     86400   IN      NS      ns2.nic.nl.
nl.                     86400   IN      NS      ns-nl.nic.fr.
nl.                     86400   IN      NS      ns1.nic.nl.
nl.                     86400   IN      NS      ns4.nic.nl.
nl.                     86400   IN      NS      ns3.nic.nl.

;; ADDITIONAL SECTION:
ns1.nic.nl.             1800    IN      A       193.176.144.2
ns2.nic.nl.             1800    IN      A       213.154.241.28
ns2.nic.nl.             1800    IN      AAAA    2001:7b8:606::28
ns3.nic.nl.             1800    IN      A       194.171.17.2
ns3.nic.nl.             1800    IN      AAAA    2001:610:0:800d::2
ns4.nic.nl.             1800    IN      A       62.4.86.232

;; Query time: 25 msec
;; SERVER: 193.176.144.2#53(193.176.144.2)
;; WHEN: Mon Jun 15 10:44:59 2009
;; MSG SIZE  rcvd: 368


Apart from that, the proposal was to make the .nl servers
authoritative for the names of the name servers, which can cause
issues due to a BIND misfeature.