Re: [Add] some background on split DNS with DNSSEC

[Paul Wouters <[e-mail]>]

On Wed, 10 Nov 2021, Deen, Glenn wrote:

> Top posting as there is a lot here, but I’d like to suggest maybe the path is carve out the ADD task and tackle the other issues elsewhere.
>
> ADD is really about finding what resolvers are available and acquiring info about them.     The rest of the problem space - who's authoritative, leaked domain names, blocking, etc are all outside of the ADD mission.   Find the available resolvers, get info about them.  That's it.

If you go that way, then I think you would only need an option for
DHCP/RA to convey a URI about where to get the list of internal domain
names, and let the URI specifics handle the authentication (eg via
HTTPS). But that would be a different draft.

Paul