[dns-operations] FlagDay 2020 UDP Size

Viktor Dukhovni ietf-dane at dukhovni.org
Wed Aug 5 17:40:28 UTC 2020


On Wed, Aug 05, 2020 at 06:47:38PM +0200, Florian Weimer wrote:

> > Stub resolvers should do the same if they have enough brain to do so :-)
> 
> They are quite forgetful by design on some systems.  But in general,
> this issue is not a problem for them because they do not enable EDNS.

Except when they specifically request DNSSEC records.

    - Because they want to perform their own validation, or

    - Because legacy libresolv does not have a way to solicit
      just the AD bit, but does return it with RES_USE_DNSSEC.

-- 
    Viktor.



More information about the dns-operations mailing list