[dns-operations] why does that domain resolve?

[Anthony Lieuallen]

On Fri, Jun 4, 2021 at 11:58 AM A. Schulze <sca at andreasschulze.de> wrote:

> So I wonder, why do so many resolver [1] obviously do only follow a
> delegation and ignore authoritative data?
>

This is a question of being parent- vs. child- centric.  The parents in the
DNS tree delegate correctly.  The fact that the children delegate
incorrectly can be a small or non-issue depending on resolver.  Google
Public DNS uses only parent delegations (
https://developers.devsite.corp.google.com/speed/public-dns/docs/troubleshooting/domains#delegation
).  Largely for issues like this: the child delegations can be wrong, but
for the domain to work at all, the parent delegations must be correct.
(Resolvers that choose to use child delegations will likely in this case
discover that these delegations are bogus, and be left with only the valid
delegations, from the parent.)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20210604/f985ecc3/attachment.html>