Why do some parent NSs "lie" about delegation records?

Stephane Bortzmeyer bortzmeyer at nic.fr
Wed Jan 7 14:04:48 UTC 2004


On Wed, Jan 07, 2004 at 07:06:47AM -0600,
 Len Conrad <LConrad at Go2France.com> wrote 
 a message of 60 lines which said:

> An "honest" parent:
> 
> dig @a.gtld-servers.net yahoo.com ns

Broken Atlas.
 
> In contrast, a "lying" parent:
> 
> # dig @ns1.ausregistry.net. yahoo.com.au ns

Correct BIND 9.
 
> It appears the com.au. parent NS is "lying" about not having an
> ANSWER to 

No, it's right. (It is for the same reason that glue NS are not signed
in DNSsec.)

For another example:

dig @nsX.nic.fr NS yahoo.fr 

X == 1 : BIND 8
X == 2 : nsd
X == 3 : BIND 9


More information about the bind-users mailing list