[dns-operations] What would it take...
Rob Foehl
rwf at loonybin.net
Wed Mar 11 19:54:11 UTC 2015
On Tue, 10 Mar 2015, Edward Lewis wrote:
> So, why can't the name server find the DS set, run a check and barf if
> there's a problem? Barf - either refusing to load the zone or refusing to
> change the zone that is already running.
> Please - if there are more impediments, suggest them. I may have missed
> something. If you disagree with an impediment, speak out.
What about the case of bad data in the parent, regardless of where it
lands on the malice / stupidity scale? Loud warnings to this effect at
zone (re)load time would be one thing, but refusing to load the zone
entirely would mean the broken DS isn't the only operational problem...
-Rob
More information about the dns-operations
mailing list