On Sun, Feb 07, 2016 at 02:16:15PM +0000, Tony Finch wrote: > Is this sensible, and if do should it be suggested by the draft?
Yes. I haven't looked in the draft recently, but I thought I mentioned that when I originally described this trick. Choose an arbitrary (preferably determinate) rrset to return, and include its covering signature if it exists and DO=1 so the response can validate. eh _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop