[dns-operations] EDNS response only with DO=1

Wed Sep 28 11:32:07 UTC 2016

In message <94F9D039-CBB4-45E2-A05C-E397E6D28B8E at redbarn.org>, P Vixie writes:
> They probably want to avoid fragmentation pain except where dnssec is involved.

You just limit the response size.  You don't need to send back plain DNS to do
that.

> On September 28, 2016 5:18:14 AM GMT+02:00, Mark Andrews <marka at isc.org> wrote:
> >
> >Can someone please explain the logic in building a DNS server that
> >supports EDNS but only returning a EDNS response if DO=1?
> >
> >Mark
> >
> >-- 
> >Mark Andrews, ISC
> >1 Seymour St., Dundas Valley, NSW 2117, Australia
> >PHONE:	+61 2 9871 4742		         INTERNET: marka at isc.org
> >_______________________________________________
> >dns-operations mailing list
> >dns-operations at lists.dns-oarc.net
> >https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> >dns-operations mailing list
> >https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> 
> -- 
> Sent from my Android device with K-9 Mail. Please excuse my brevity.
> ------0E8NQTXTFZ2MA5GZJSVXQMDV0F7DG0
> Content-Type: text/html;
>  charset=utf-8
> Content-Transfer-Encoding: 8bit
> 
> <html><head></head><body>They probably want to avoid fragmentation pain except where dnssec is involved.<br><br><div class="g
> mail_quote">On September 28, 2016 5:18:14 AM GMT+02:00, Mark Andrews <marka at isc.org> wrote:<blockquote class="gmail_quo
> te" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
> <pre class="k9mail"><br />Can someone please explain the logic in building a DNS server that<br />supports EDNS but only retu
> rning a EDNS response if DO=1?<br /><br />Mark<br /></pre></blockquote></div><br>
> -- <br>
> Sent from my Android device with K-9 Mail. Please excuse my brevity.</body></html>
> ------0E8NQTXTFZ2MA5GZJSVXQMDV0F7DG0--
> 
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org