[19120] in Kerberos_V5_Development
Re: Proposal for using NAPTR/URI records
daemon@ATHENA.MIT.EDU (Nico Williams)
Thu Feb 26 14:17:19 2015
Date: Thu, 26 Feb 2015 13:17:09 -0600
From: Nico Williams <nico@cryptonector.com>
To: Brandon Allbery <ballbery@sinenomine.net>
Message-ID: <20150226191708.GE9895@localhost>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <1424970902.3235.3.camel@vikktakkht>
Cc: "krbdev@mit.edu" <krbdev@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On Thu, Feb 26, 2015 at 05:15:15PM +0000, Brandon Allbery wrote:
> On Thu, 2015-02-26 at 10:55 -0600, Nico Williams wrote:
> > > 2. DNS stacks which drop queries for unknown QTYPEs.
> >
> > type=ANY.
>
> I've seen too many commodity routers that (a) insist on giving out the
> address of their internal DNS caching server (b) silently drop any RR
> they don't understand from cached/forwarded replies.
How can (b) work in a DNSSEC world? I imagine the affected zones are
opting out.
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
