[dns-operations] [Security] Glue or not glue?

[Anand Buddhdev]

On 04/05/15 09:11, Stephane Bortzmeyer wrote:

Bonjour Stéphane,

> A new edition of the DNS security guide by ANSSI (French cybersecurity
> agency) recommends to prefer delegations with glue because glueless
> delegations "may carry additional risks since they create a
> dependency". Is there any other "best practices" text which makes such
> a recommendation?

DJB also talks about the risks of glueless delegations on his page:

http://cr.yp.to/djbdns/notes.html#gluelessness

and recommends the use of in-bailiwick names.

Regards,
Anand