[dns-operations] Can Root DNS server modify the response?

[Ondřej Surý]

For a *censorship* purposes, there’s no difference between not getting an answer or not getting an answer.

As much as I love DNSSEC, it doesn’t prevent censorship implemented as DoS.

Ondřej 
--
Ondřej Surý <ondrej at sury.org>

On 25 Mar 2019, at 16:18, Viktor Dukhovni <ietf-dane at dukhovni.org> wrote:

>> On Mar 25, 2019, at 10:56 AM, Ondřej Surý <ondrej at sury.org> wrote:
>> 
>> Matt, there’s no difference between NXDOMAIN and SERVFAIL from the client perspective.
> 
> Actually, there is for DANE, SPF, Kerberos domain to realm mappings, ...
> but TLDs are not usually in scope for this type of query.
> 
> [ The DNS is not *just* for web browsing ]
> 
> -- 
>    Viktor.
> 
> 
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-operations mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations