On Mon, Nov 09, 2015 at 04:55:24PM +0000, Tony Finch wrote:
> With the current DNS protocol, a stub resolver can get all the records it
> needs to validate a response in 1RTT, by sending multiple concurrent
> queries for all the possible delegation points in the QNAME.

But has to retain state for all those active queries, which adds a fair
bit of complexity.  I would expect it to be a lot more straightforward to
code a stub validator using CHAIN.

-- 
Evan Hunt -- e...@isc.org
Internet Systems Consortium, Inc.

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to