<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 10pt; font-family: Verdana,Geneva,sans-serif'>
<p>On 2019-04-07 19:03, Davey Song wrote:</p>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0"><!-- html ignored --><!-- head ignored --><!-- meta ignored -->
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr"> </div>
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left: 1px solid #cccccc; padding-left: 1ex;">The "popular sites" you mention have all done this already. They also <br /> tend to use services like Akamai, which use short TTLs, dynamic records, <br /> and CDNs which limit the types of damage that you are describing.<br /> </blockquote>
<div>
<div>I missed one case in the "outage of popular names during the TTL ". It is that the short DNS TTL of CDN ,5 minutes for example, will be occasionally ignored and changed by resolver operators up to 2-3 hours due to some policy conflicts.</div>
<div> </div>
<div>[snip]</div>
<div> </div>
<div>If the resolver operator went out of their way to ignore the TTL in the first place, what makes you think that they will follow any guidance they receive to ignore it again? </div>
</div>
<div> </div>
<blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left: 1px solid #cccccc; padding-left: 1ex;">We have to get out of the mindset that it's our job to fix someone <br /> else's mistakes. </blockquote>
<div> </div>
<div>Mistakes of both resolver and authoritaive servers are observed. I'm writing this not asking to add more straw on the camel. I just would like to konw any best practice on this issue on this mailing list. Or it is nothing but other people's problem? </div>
<div> </div>
<div>In a sense, yes. If you're an auth server operators, set your TTLs to meet your needs. If you're a resolver operator taking service calls, first confirm that the auth side has updated to something other than what you have, and if so, flush the cache. </div>
<div> </div>
<div>None of this is hard, or even complicated. </div>
<div> </div>
<div>Doug</div>
</div>
</div>
</div>
</div>
</blockquote>
</body></html>