> > Should we also mention that NODATA responses usually include a SOA record > > in the authority section to indicate to resolvers how long to do negative > > caching for? > > That does not seem to be established firmly enough for us to add.
It's necessary for negative caching, so I believe it's required for authoritative responses (RFC 2308 section 3), but optional for recursive. Might also add that DNSSEC-signed zones will include a signed NSEC/NSEC3 to prove the nonexistence of the qtype. -- Evan Hunt -- e...@isc.org Internet Systems Consortium, Inc. _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
