In message <sg2pr02mb0746e5de8a1fc34244aea4edb7...@sg2pr02mb0746.apcprd02.prod. outlook.com>, yao jk writes: > Hello, > > Assume the resolver cache has 3 records: > A.com IN dname b.com 100 > A.com IN rrsig dname 100 > A.a.com IN cname a.b.com 2000 > > > When TTL expires after 100s but not after 2000s, what will resolver do when t > he query for a.a.com with dnssec DO bit enabled?
DNAME aware clients cache the DNAME, not the CNAME. The CNAME is only there for clients that don't understand DNAME. > Thanks > > Jiankang > > >From my phone > _______________________________________________ > DNSOP mailing list > DNSOP@ietf.org > https://www.ietf.org/mailman/listinfo/dnsop -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
