Re: NOTIMP for unrecognized qtypes

2017-07-27 Thread Jacob Hoffman-Andrews via Unbound-users
On 07/27/2017 01:28 PM, Robert Edmonds wrote: > Jacob Hoffman-Andrews via Unbound-users wrote: >> I'm trying to write some documentation for users of Let's Encrypt about >> CAA. I believe it's the case that standards-conformant authoritative >> resolvers should return NOERROR for qtypes they don't

Re: NOTIMP for unrecognized qtypes

2017-07-27 Thread Robert Edmonds via Unbound-users
Jacob Hoffman-Andrews via Unbound-users wrote: > I'm trying to write some documentation for users of Let's Encrypt about > CAA. I believe it's the case that standards-conformant authoritative > resolvers should return NOERROR for qtypes they don't recognize, rather > than NOTIMP. Is this correct? I

NOTIMP for unrecognized qtypes

2017-07-27 Thread Jacob Hoffman-Andrews via Unbound-users
Hi all, I'm trying to write some documentation for users of Let's Encrypt about CAA. I believe it's the case that standards-conformant authoritative resolvers should return NOERROR for qtypes they don't recognize, rather than NOTIMP. Is this correct? If so, what is the relevant standard? I haven't

Re: DNS query native TLS support port 853

2017-07-27 Thread A. Schulze via Unbound-users
Beeblebrox via Unbound-users: Hi. I just came across this little snippet from https://calomel.org/unbound_dns.html forward-addr: 145.100.185.15@853 # dnsovertls.sinodun.com US forward-addr: 185.49.141.37@853 # getdnsapi.net US DNS via TLS (Port 853/tcp) is one way to encrypt stub-resolver