deny tld wilcards?

Rick Wesson wessorh at ar.com
Tue Sep 16 16:19:14 UTC 2003


its been said before... had coing ips is bad, an option that would check
to see if the ip for *.tld == RR(A) is prefered.

(someone already said the above some place, i'm just repeating it)

-rick


On Tue, 16 Sep 2003, Jakob Schlyter wrote:

> On Tue, 16 Sep 2003, Paul Vixie wrote:
> 
> > we're working on it now
> 
> good. very good.
> 
> once that has been deployed, their next version will probably do A-record
> synthesis instead. I believe we need to be prepared for something like:
> 
> 	options {
> 		always-nxdomain { 64.94.110.11; };
> 	};
> 
> 
> the impact of this whole issue on dnssec may be "interesting".
> 
> 
> 	jakob
> 



More information about the bind-workers mailing list