Re: [DNSOP] opportunistic semi-authoritative caching (Re: DNSOP Call for Adoption - draft-tale-dnsop-serve-stale)

2017-09-09 Thread Paul Vixie
Evan Hunt wrote: On Sat, Sep 09, 2017 at 08:29:28AM -0700, Paul Vixie wrote: rpz is a defense. it assumes that the content owner is trying to hurt me. it is therefore one step away from being an attack, and is in any case, not an attack. Sure. And TTL stretching assumes the content owner

Re: [DNSOP] opportunistic semi-authoritative caching (Re: DNSOP Call for Adoption - draft-tale-dnsop-serve-stale)

2017-09-09 Thread Evan Hunt
On Sat, Sep 09, 2017 at 08:29:28AM -0700, Paul Vixie wrote: > rpz is a defense. it assumes that the content owner is trying to hurt > me. it is therefore one step away from being an attack, and is in any > case, not an attack. Sure. And TTL stretching assumes the content owner is a fellow

Re: [DNSOP] opportunistic semi-authoritative caching (Re: DNSOP Call for Adoption - draft-tale-dnsop-serve-stale)

2017-09-09 Thread Paul Vixie
Evan Hunt wrote: On Fri, Sep 08, 2017 at 06:43:52PM -0700, Paul Vixie wrote: not so fast. nxdomain redirection is an attack. censorship is an attack. i don't think you mean to group ttl stretching in with those attacks. because if you do, then we agree, it is an attack, and ought not be done,