[bind10-dev] Datasource discussion

[Shane Kerr]

Jelte, 

On Wed, 2010-01-13 at 11:31 +0100, Jelte Jansen wrote:
> We agreed that including signatures in any result would be a relatively
> simple optimization that all datasources would probably want to make
> anyway. For this, we want the RRset class to have an attribute to store
> signatures. There should be a way to tell find() not to add them, and
> perhaps some datasources might simply not do it. For NSEC(3)s, we are
> (or at least I am) not sure on whether it is possible to also add those
> in one call, should the name not be found. If there are multiple, we may
> have a bit of a problem if the zone changes while we are building the
> result. This is a specific case of a more general problem though, which
> needs to be resolved anyway.

I'd like to push for a "generic", non-optimal implementation of this,
and not require that each datasource be forced to implement
DNSSEC-optimized lookups. As you say "some datasources may simply not do
it", so we need a way to get this data in that case.

My reasoning for this is that there may be people who want to play
around with implementing their own data source, but don't know or care
about DNSSEC. Or at least who would prefer to get started quickly
without implementing a large API on their side.

Cheers,

--
Shane