On Wed, Jan 31, 2018 at 10:04:03AM +0000, Ray Bellis wrote: > > Won't that cause the resolver to cycle through every root server letter > hoping for one that doesn't give that answer?
It might, yes. But that's a poor reason to give an authoritative answer that a name which does exist instead does not. Such resolvers are broken under 6761 anyway, and shouldn't be making such a request. But lying about the answer is not in keeping with 6761. There remains some controversy about what the right answer would be, given some interpretations of REFUSED. A -- Andrew Sullivan a...@anvilwalrusden.com _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
