> - When DE=1, the authoritative server includes all Delegation Type > RRsets present at the delegation point, together with the NS RRset > (if one exists). In the current design, a server omitting an NS > RRset is an optimisation, not a security feature.
If I remember correctly, the original purpose of DE was the optimization to leave out NS when DELEG records were present. Later it became more complicated. I think it is mostly for the deleg wg to discuss, do we want the extra complexity for this optimization or not. What does it mean operationally, when delegation replies get bigger due to inclusion of NS records. _______________________________________________ DNSOP mailing list -- [email protected] To unsubscribe send an email to [email protected]
