Re: [DNSOP] Fwd: New Version Notification for draft-pan-dnsop-explicit-forged-answer-signal-00.txt

2024-01-10 Thread Lanlan Pan
Thanks Paul. Paul Wouters 于2024年1月10日周三 23:01写道: > On Wed, 10 Jan 2024, Lanlan Pan wrote: > > > I have submitted a new draft to discuss the faked answer returned from > the recursive resolver. > > > > Your comments are appreciated. > > As I've said during the discussions on RBL and an updated

Re: [DNSOP] Fwd: New Version Notification for draft-pan-dnsop-explicit-forged-answer-signal-00.txt

2024-01-10 Thread Paul Wouters
On Jan 10, 2024, at 20:55, Paul Vixie wrote: > > i think you mean RPZ here. Yes I did. Thank you. Paul > > Paul Wouters wrote on 2024-01-10 07:01: >>> On Wed, 10 Jan 2024, Lanlan Pan wrote: >>> I have submitted a new draft to discuss the faked answer returned from the >>> recursive

Re: [DNSOP] Fwd: New Version Notification for draft-pan-dnsop-explicit-forged-answer-signal-00.txt

2024-01-10 Thread Lanlan Pan
Thanks Bob, I will revised it. Bob Harold 于2024年1月10日周三 22:23写道: > > On Wed, Jan 10, 2024 at 4:19 AM Lanlan Pan wrote: > >> Hi all, >> >> I have submitted a new draft to discuss the faked answer returned from >> the recursive resolver. >> >> Your comments are appreciated. >> >> >> --

Re: [DNSOP] Working Group Last Call for draft-ietf-dnsop-rfc8109bis

2024-01-10 Thread George Michaelson
I support publication. The remainder feel like nits which would get resolved in editor queue. I discussed the priming issue with Paul H privately and I think his response covered my concerns. Basically, if you run hyperlocal root, it subsumes the functionality of the cache priming activity, but

Re: [DNSOP] Fwd: New Version Notification for draft-pan-dnsop-explicit-forged-answer-signal-00.txt

2024-01-10 Thread Paul Vixie
i think you mean RPZ here. Paul Wouters wrote on 2024-01-10 07:01: On Wed, 10 Jan 2024, Lanlan Pan wrote: I have submitted a new draft to discuss the faked answer returned from the recursive resolver. Your comments are appreciated. As I've said during the discussions on RBL and an updated

Re: [DNSOP] [Ext] Working Group Last Call for draft-ietf-dnsop-rfc8109bis

2024-01-10 Thread Paul Hoffman
On Jan 10, 2024, at 14:05, Roy Arends wrote: > I support this documents. Thanks! > Furthermore, here are some comments: > >2. Description of Priming > >Priming is described in Sections 5.3.2 and 5.3.3 of [RFC1034]. The >scenario used in that description, that of a

Re: [DNSOP] Working Group Last Call for draft-ietf-dnsop-rfc8109bis

2024-01-10 Thread Roy Arends
Let me try that again with proper indentation. > On 9 Jan 2024, at 01:54, Tim Wicinski wrote: > > All > > > This starts a Working Group Last Call for draft-ietf-dnsop-rfc8109bis > "Initializing a DNS Resolver with Priming Queries" > > Current versions of the draft is available here: >

Re: [DNSOP] Working Group Last Call for draft-ietf-dnsop-rfc8109bis

2024-01-10 Thread Roy Arends
> On 9 Jan 2024, at 01:54, Tim Wicinski wrote: > > All > > > This starts a Working Group Last Call for draft-ietf-dnsop-rfc8109bis > "Initializing a DNS Resolver with Priming Queries" > > Current versions of the draft is available here: >

[DNSOP] Priming and RFC 8806

2024-01-10 Thread Paul Hoffman
On Jan 9, 2024, at 19:17, Paul Hoffman wrote: >> Perhaps a recommendation could be to check with ZONEMD and do an AXFR, >> eg recomend implementing RFC 8806 - "Running a Root Server Local to a >> Resolver". >> Comes with added bonuses on top of a signature on all the root glue. >> >> I still

Re: [DNSOP] Fwd: New Version Notification for draft-pan-dnsop-explicit-forged-answer-signal-00.txt

2024-01-10 Thread Paul Wouters
On Wed, 10 Jan 2024, Lanlan Pan wrote: I have submitted a new draft to discuss the faked answer returned from the recursive resolver. Your comments are appreciated. As I've said during the discussions on RBL and an updated version for RBL, if these things are done "for the user", the best

Re: [DNSOP] Fwd: New Version Notification for draft-pan-dnsop-explicit-forged-answer-signal-00.txt

2024-01-10 Thread Bob Harold
On Wed, Jan 10, 2024 at 4:19 AM Lanlan Pan wrote: > Hi all, > > I have submitted a new draft to discuss the faked answer returned from the > recursive resolver. > > Your comments are appreciated. > > > -- Forwarded message - > 发件人: > Date: 2024年1月10日周三 16:11 > Subject: New

[DNSOP] Fwd: New Version Notification for draft-pan-dnsop-explicit-forged-answer-signal-00.txt

2024-01-10 Thread Lanlan Pan
Hi all, I have submitted a new draft to discuss the faked answer returned from the recursive resolver. Your comments are appreciated. -- Forwarded message - 发件人: Date: 2024年1月10日周三 16:11 Subject: New Version Notification for draft-pan-dnsop-explicit-forged-answer-signal-00.txt