On Wed, Nov 07, 2018 at 08:55:09AM +0700, Warren Kumari <warren at kumari.net> wrote a message of 236 lines which said: > I'm somewhat surprised that this document makes no mention of DNSSEC > / RFC8198 "Aggressive Use of DNSSEC-Validated Cache". And RFC 8020 too, if the domain is not DNSSEC-signed.