On 04/05/15 09:11, Stephane Bortzmeyer wrote:

Bonjour Stéphane,

> A new edition of the DNS security guide by ANSSI (French cybersecurity
> agency) recommends to prefer delegations with glue because glueless
> delegations "may carry additional risks since they create a
> dependency". Is there any other "best practices" text which makes such
> a recommendation?

DJB also talks about the risks of glueless delegations on his page:

http://cr.yp.to/djbdns/notes.html#gluelessness

and recommends the use of in-bailiwick names.

Regards,
Anand
_______________________________________________
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs

Reply via email to