SRV records and cache poisoning (full)
stefan.puiu at gmail.com
Wed Jun 8 05:41:57 UTC 2005
That's the approach that makes most sense to me, too, since the AA bit
covers only the first RR or RRset anyway in responses from
authoritative nameservers; the rest of answer records are not
guaranteed to have this property. Thanks for the help.
Thanks for the help.=20
On 6/7/05, Barry Margolin <barmar at alum.mit.edu> wrote:
> Also, since some caching servers will pass the initial response from the
> authoritative server straight through, stub resolvers should *not* cache
> anything other than the answer to the query they originally sent.
> If the records in the authority or additional section are cacheable, the
> stub resolver should rely on the caching server to cache them. So when
> the stub goes on to look these up, they'll already be in the server's
> cache and the resolution should be quick.
> Barry Margolin, barmar at alum.mit.edu
> Arlington, MA
> *** PLEASE post questions in newsgroups, not directly to me ***
More information about the bind-users