sanity check, someone? i believe that in dnssec, an empty non-terminal has a proof that the name exists, and a proof that there are no RR's. thus, vastly different from the signaling for NXDOMAIN.
this ought to end, for all time, the debate about whether empty nonterminals exist or not. (there are some authority servers who return NXDOMAIN for them, and we need to know whether those servers are wrong, before we advance query minimization.) vixie _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop