[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]


To: Robert Elz <kre@munnari.OZ.AU>
CC: Andreas Gustafsson <gson@nominum.com>, "D. J. Bernstein" <djb@cr.yp.to>, ngtrans@sunroof.eng.sun.com, namedroppers@ops.ietf.org, ipng@sunroof.eng.sun.com, dnsop@cafax.se
From: Masataka Ohta <mohta@necom830.hpcl.titech.ac.jp>
Date: Sat, 4 Aug 2001 16:15:15 +0859 ()
In-Reply-To: <2062.996749378@brandenburg.cs.mu.OZ.AU> from Robert Elz at "Aug2, 2001 05:49:38 pm"
Sender: owner-dnsop@cafax.se
Subject: Re: Joint DNSEXT & NGTRANS agenda

Kre;

>   | When resolving, BIND 8 and 9 do reject
>   | all records that are not within the domain whose authoritative
>   | qservers are being queried.
> 
> That's broken, and should be fixed.  If it really is as you have
> explained it, it guarantees that some perfectly legal DNS configurations
> can never be properly resolved.
> 
>   | If they did not, we would
>   | be seeing much more cases of cache poisoning that we do now.
> 
> How?   No-one is suggesting that these records be put in the cache.

I have been suggesting that these records be put in a referral-local
cache content of which is not used for usual A query nor glue A of
other referral points.

Other approaches are broken w.r.t. performance.

							Masataka Ohta

Home | Date list | Subject list