Validating zones as a slave?

[P Vixie]

By the letter of that text it is clearly wrong.

The text should say, response was generated by an authority server.

Forwarded responses with aa=1 are informative.

Paul

On September 16, 2015 6:53:07 PM GMT+02:00, Robert Edmonds <edmonds at mycre.ws> wrote:
>Paul Vixie wrote:
>> i don't agree that AA=1 is wrong.
>> 
>> BIND4/BIND8 used to pass through the full response, including the AA
>bit, on cache misses. so a client would see AA=1 on the first request
>for a given rrset, and AA=0 afterward.
>> 
>> this was not wrong. i demanded it be changed for BIND9, but not
>because it was wrong. rather, in BIND9 i wanted all responses to be
>generated from the cache, and never passed through. so, AA=0 on all
>RD=1 responses from BIND9, but as a side effect, not as a correctness
>matter
>
>How do you interpret "response" and "responding name server" in this
>document so that this behavior is not wrong?
>
>
>RFC 1035        Domain Implementation and Specification    November
>1987
>
>
>4.1.1. Header section format
>
>[...]
>
>
>AA              Authoritative Answer - this bit is valid in responses,
>                and specifies that the responding name server is an
>                authority for the domain name in question section.
>
>-- 
>Robert Edmonds

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-workers/attachments/20150916/898ee497/attachment.html>