Promoting DNSSEC to nay-sayers

Tony Finch dot at
Fri Sep 29 11:41:30 UTC 2017

sthaug at <sthaug at> wrote:

> > There's a really neat DNSSEC-related improvement on the way: RFC 8198
> > negative answer synthesis. This should greatly reduce the amount of junk
> > queries to the root name servers (and other parts of the namespace too).
> > Should be particularly good for mail servers that deal with amazing
> > amounts of toxic waste.
> Which begs the question: Should we expect Joe Average DNS Administrator
> to care about the amount of junk queries to the root name servers?

You win from lower latency responses and wasting less RAM on negative
cache entries.

f.anthony.n.finch  <dot at>  -  I xn--zr8h punycode
Cromarty, Forth, Tyne, Dogger: South or southwest 5 or 6. Moderate,
occasionally rough in Cromarty. Rain at first, then showers. Moderate,
becoming good.

More information about the bind-workers mailing list