Tony Finch wrote: > Evan Hunt <e...@isc.org> wrote: >> > >> > I'm concerned that a NOERROR/NODATA for qtype=ANY, once cached, would be >> > identical to the cache representation of an empty nonterminal node, and >> > that all subsequent queries for any other qtype would then be answered >> > with the cached NODATA. > > These are signed zones so the answer has to validate. Perhaps the answer > should be just the NSEC(3) and RRSIG(NSEC(3)) records matching the QNAME, > which is a plausible way to say, yes we have records here even though this > answer doesn't contain them.
i love this plan. -- Paul Vixie
_______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
