[dns-operations] All NSs for a TLD being in the TLD itself

Frederico A C Neves fneves at registro.br
Thu Oct 24 15:13:17 UTC 2013


On Thu, Oct 24, 2013 at 04:59:36PM +0200, Marco Davids (SIDN) wrote:
> On 10/24/13 16:54, Paul Hoffman wrote:
> > The new records for one of the shiny new gTLDs are:
> > 
> > This works, of course, but it feels a bit fragile for me.
> 
> To me it feels pretty lean and mean:
> 
> http://trans-trust.verisignlabs.com/pix/xn--ngbc5azd.-names.png
> 
> > Is there a history of this being unsafe? Of being more safe than NSs whose names are in other TLDs?
> 
> That's almost a religious discussion, in my experience.

I would not say that, but because of the "over inclusiveness" of the
root glue policy, the use of out of zone names, makes no difference
for Paul's question perspective.

Fred



More information about the dns-operations mailing list