> On 6 Mar 2015, at 22:53, Paul Vixie <p...@redbarn.org> wrote: > >>> if you want to change how DNSSEC works, i'll listen. but there's no >>> reasonable interpretation of past or current specifications by which >>> QTYPE=RRSIG can be categorized a "meta-query". (unlike >>> QTYPE=ANY/IXFR/AXFR, or RD=0 when speaking to a recursive-only server.) >> I never said that RRSIG is a meta query. I said that implementing RRSIG >> is as hard as implementing ANY with regard to the aspect that you have >> to use/look for more than one query type, which is different from >> all other query types. > > i see. so, are you proposing to change the way DNSSEC works, or not?
I think Ralf is right that QTYPE=RRSIG is weird just like ANY, in that it is asking for (part of) all? any? RRsets at a given owner name. I wonder how caches handle it... Since DNSSEC does not use or need QTYPE=RRSIG, I do not see how deprecating it would require any changes to DNSSEC. Tony. -- f.anthony.n.finch <d...@dotat.at> http://dotat.at
_______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
