[dns-operations] should recursors think there are only delegation data in tld name servers?

[P Vixie]

See below.

On March 27, 2014 10:23:21 PM PDT, "刘明星" <lmxhappy at gmail.com> wrote:
>dig @n.de.net 1s.de mx +dnssec
>and find that the mx record of 1s.de is from the
>n.de.net(194.146.107.6),
>but it is not enough to make sure that from the .de zone. ...

No.

The ns owner in the response tells the zone. The rrsig records prove it.

>so it is clear for .de administrator to know the details.

We can see the details.

Vixie
-- 
Sent from my Android phone with K-9 Mail. Please excuse my brevity.