deny tld wilcards?

Mark Kosters markk at verisignlabs.com
Tue Sep 16 16:47:26 UTC 2003


On Tue, Sep 16, 2003 at 06:12:50PM +0200, Jakob Schlyter wrote:
> On Tue, 16 Sep 2003, Paul Vixie wrote:
> 
> > we're working on it now
> 
> good. very good.
> 
> once that has been deployed, their next version will probably do A-record
> synthesis instead. I believe we need to be prepared for something like:
> 
> 	options {
> 		always-nxdomain { 64.94.110.11; };
> 	};
> 
> 
> the impact of this whole issue on dnssec may be "interesting".

I don't see how this would work given the NXT's would not be there.

Mark

-- 

Mark Kosters            markk at verisignlabs.com       Verisign Applied Research


More information about the bind-workers mailing list