On Mon, 2 Jul 2018, Jared Mauch wrote:
As a longtime ANY (ab)user, I welcome an approach where we get AAAA + A at the same time. This can be done by just returning the additional but it really depends on if the clients or stubs will use it.
If you are trusting an unsigned A record in the answer section, you might as well trust the unsigned AAAA record in the additional section too. I think minimum responses should still always just include this. Paul (although doing this only for DNSSEC would be a good motivator :) _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop