[dns-operations] why does that domain resolve?

Giovane C. M. Moura giovane.moura at sidn.nl
Mon Jun 7 14:35:32 UTC 2021



> This is a question of being parent- vs. child- centric.  The parents in
> the DNS tree delegate correctly.  

FWIW, we did a study a couple of years ago [1] analyzing these
inconsistencies. We found 13 million second-level domains (out of 166M)
that were inconsistent [0] (table 1, data from 2019-10-16)


> Indeed.  In our first QNAME minimisation implementation, we used NS
>queries to follow delegations.

We saw this also clearly on .nl and .nz when Google Public DNS  (GDNS)
turned on q-min: fig 3 in [1]. Out of sudden we start to see far more NS
queries from GDNS than the other types of records.

/giovane

[0]
https://www.sidnlabs.nl/downloads/53BNt9EPxZQOCHYjqWhYfR/7295d79a207afc79cab6309d40a15a76/When_parents_and_children_disagree_Diving_into_DNS_delegation_inconsistency.pdf

[1]
https://www.sidnlabs.nl/downloads/4O6kRGL3Un0HrT5TcrBwaG/c69d421eb252da5902f46c1605175649/Clouding_up_the_Internet_how_centralized_is_DNS_traffic_becoming.pdf


More information about the dns-operations mailing list