[bind10-dev] Datasource discussion

[Shane Kerr]

On Thu, 2010-01-14 at 22:23 +0800, zhanglikun wrote:
> Shane
> 
> > The "fuzziness" I'm talking about is on query results, so for example:
> > 
> >      1. Admin does a DDNS update to update an NS RRSET: modify the NS
> >         RRSET to add a new name server, then add an A record for it.
> >         (All in theory atomic since this is DDNS.)
> >      2. User queries for this NS RRSET, and gets the updated NS RRSET,
> >         but the A record is not yet there, so it is not added to the
> >         additional section. This may result in an extra query
> >         (hopefully), or a confused user.
> > 
> > I think this isn't that bad. It should at least be written down. :)
> 
> Maybe it's a bad news for rrsets with RRSIG. If one NS RRSET has two
> records:
> 
> com  NS   a.com
> com  NS   b.com
> 
> com  RRSIG  NS  ...
> 
> 1.  Admin does a DDNS update to add/delete a record to NS RRSET, but the
> RRSIG hasn't been updated, user will get the new NS RRSET with its old
> RRSIG,
> 2.  The recursor will treat the answer as invalid, it will cause some
> problem.

Good point... okay. Seems like we have items for discussion in our
call! :)

--
Shane