[dns-operations] All NSs for a TLD being in the TLD itself

Chris Thompson cet1 at cam.ac.uk
Fri Oct 25 10:58:33 UTC 2013

On Oct 25 2013, Andrew Sullivan wrote:

>On Thu, Oct 24, 2013 at 10:53:03PM +0000, Wolfgang Nagele wrote:
>> Why would this be unsafe and/or fragile? As was already mentioned
>> the root zone has to include glue for whichever name you choose
>> anyway, due to the position in the hierarchy 
>This isn't strictly true.  The only thing the root zone actually has
>to contain is glue for the NS records on the parent side of any
>delegation from the root.  It just so happens that the root zone
>includes the other glue too.

That depends on whether you think including "sibling glue" [*] is
mandatory, or at least advisable. All NS records for TLD delegations
involve either "required glue" if the name is inside the TLD, or
"sibling glue" if it is inside another TLD. (In theory, it could
be a name actually in the root zone itself, but of course there
aren't any such cases.)

[*] "sibling glue" is what the BIND documentation (e.g. the man page
for named-checkzone) calls it. It may not be standard terminology.

Chris Thompson               University of Cambridge Computing Service,
Email: cet1 at ucs.cam.ac.uk    Roger Needham Building, 7 JJ Thomson Avenue,
Phone: +44 1223 334715       Cambridge CB3 0RB, United Kingdom.

More information about the dns-operations mailing list