Promoting DNSSEC to nay-sayers

Tony Finch dot at dotat.at
Fri Sep 29 11:41:30 UTC 2017


sthaug at nethelp.no <sthaug at nethelp.no> wrote:

> > There's a really neat DNSSEC-related improvement on the way: RFC 8198
> > negative answer synthesis. This should greatly reduce the amount of junk
> > queries to the root name servers (and other parts of the namespace too).
> > Should be particularly good for mail servers that deal with amazing
> > amounts of toxic waste.
>
> Which begs the question: Should we expect Joe Average DNS Administrator
> to care about the amount of junk queries to the root name servers?

You win from lower latency responses and wasting less RAM on negative
cache entries.

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/  -  I xn--zr8h punycode
Cromarty, Forth, Tyne, Dogger: South or southwest 5 or 6. Moderate,
occasionally rough in Cromarty. Rain at first, then showers. Moderate,
becoming good.


More information about the bind-workers mailing list