Re: [BEHAVE] RFC6147 and RFC7208 interoperability issues

[Keith Moore <[e-mail]>]

On 2/6/22 21:48, Klaus Frank wrote:

> Also the noted "smtp server and DNS may not be under the same 
> management" is also one of the reasons why it should be within DNS64. 

Disagree.  One of the general problem with DNS, BTW, is that the people 
who operate the DNS servers and the people who operate the applications 
that require correct DNS configuration are often not the same people, 
and often don't even work with the same company. So DNS already gets 
out-of-sync with reality too often as it is.

If a NAT takes it upon itself to alter DNS records in flight, there's 
even more potential for the DNS to get out-of-sync with reality, and 
three different parties that have to potentially be reconciled to fix 
the problem.

Of course this is a big reason that applications are increasingly using 
DoH or DoT to query a trusted server whenever possible - to minimize the 
potential for some third party to have screwed things up.

Keith