[dns-operations] NS records in Authority for NOERROR responses
paul at redbarn.org
Fri Sep 4 09:00:50 UTC 2015
Jan Včelák wrote:
> Mark Andrews wrote:
>> Returning NS records also helps when the parent servers also serve
>> the child zone and the two sets of servers differ. Without NS
>> records being returned you would never ask any server but the parent
> I agree. But again, this applies to insecure zones. With DNSSEC, you
> would find out easily that there is a zone cut.
sure, but under what conditions would a validating resolver decide to
query for the apex NS?
More information about the dns-operations