[30594] in North American Network Operators' Group
Re: lame delegations
daemon@ATHENA.MIT.EDU (Phillip Vandry)
Fri Aug 18 14:58:46 2000
Date: Fri, 18 Aug 2000 14:56:25 -0400 (EDT)
Message-Id: <200008181856.OAA10267@Iodine.Mlink.NET>
From: Phillip Vandry <vandry@Mlink.NET>
To: Joshua Goodall <joshua@roughtrade.net>
Cc: nanog@merit.edu, lir-wg@ripe.net
In-reply-to: Your message of "Fri, 18 Aug 2000 20:54:42 EDT."
<Pine.BSF.4.21.0008181952330.20704-100000@juice.shallow.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu
Why not this?
Registrars only accept to create a glue record if there already exists
a PTR entry for the requested address that points to the right name.
-Phil
> I suspect that solving this correctly would depend on the ICANN DNSO
> recognising the authentication mechanisms of the databases of the RIR's
> under the ICANN ASO (RIPE, ARIN, APNIC).
>
> Unfortunately, no-one thought of this problem when they let registrars
> inject host records. The only way to verify automatically that a host
> record is allowed from a given netblock is to use the same authentication
> mechanisms that (say) RIPE do for reverse delegations.
