[dns-operations] NS records in Authority for NOERROR responses

[Paul Vixie]

Andrew Sullivan wrote:
> On Thu, Sep 03, 2015 at 05:44:07AM -0700, Paul Vixie wrote:
>> ...
>>
>> but no, it's not relied upon. the system will work without it. this adds
>> robustness, no more.
>
> I agree, but I'll note that RFC 5452 (in section 6) reiterates the
> advice only to accept in-domain records.  If people follow that
> advice, then the failure to include these NS records in NODATA answers
> could actually result in more queries, because the server might decide
> to check the NS set before accepting the answer.  I rather doubt
> anyone would do this, but it is strictly what the advice implies.

you're right. some document should say "it's strongly recommended, and
<above> is why."

-- 
Paul Vixie