[dns-operations] NXDOMAIN and negative caching

Tony Finch dot at dotat.at
Tue Feb 2 10:32:30 UTC 2016


Andrew Sullivan <ajs at anvilwalrusden.com> wrote:
>
> > - An NXDOMAIN indicates /no/ records exist for that name.
>
> Almost.  With DNSSEC, you'll get records for that name, but they prove
> its non-existence.

Only if you happen to query for an NSEC3 owner name :-)

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
Thames, Dover: Southwest 6 to gale 8. Moderate or rough. Rain at first, then
showers. Moderate or good.



More information about the dns-operations mailing list