On Friday, 3 April 2020 17:20:10 UTC Shumon Huque wrote: > On Fri, Apr 3, 2020 at 11:59 AM Ralf Weber <[email protected]> wrote: > > Well it was you think and others (including me) disagree for valid > > reasons. > > There is absolutely no reason to issue queries for some validation, when > > you already got good results. > > > > I see this is a workaround for people to lazy to update the delegations, > > and put more complexity and work on resolvers. > > Dear Ralf, > > It is possible that there exist some people who want this because they > are "too lazy" to update delegations. But I strongly suspect there are other > reasons. > > ...
the economy requires faster, easier takedown of domains. when a delegation is revoked due to bad behaviour by a registrant, it has to die _everywhere_ almost immediately. not sporadically depending on which (above vs. below) NS RRset was cached, or on what TTL it had. the overwhelming majority of newly created domains are used maliciously, and die quickly after short, brutal lives. we have to make them as easy to kill as to birth. when i saw ralf say that there was "absolutely no reason", i recognized that he's living in a very different world (domains are mostly good) than i am (domains are mostly bad). we probably won't find common ground. -- Paul _______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations
