[dns-operations] NXDOMAIN at zone apex???

[Andrew Sullivan]

On Wed, May 24, 2017 at 08:16:06PM -0400, Viktor Dukhovni wrote:
> I would have thought that's invalid, but unbound does not mind:

It is invalid.  Unbound tolerates this because a few "special" vendors
don't know the difference between No answer/no data responses and
NXDOMAIN, so resolvers have to put up with this.  But it's wrong, yes.
See RFC 8020.

A

-- 
Andrew Sullivan
ajs at anvilwalrusden.com