Re: [dd] [Ext] starting charter text for the DELEG BOF discussion

[Dave Lawrence <[e-mail]>]

Geoff Huston writes:
> I'm curious - why should a DELEG-like delegation referral point to
> precisely the same nameserver names as NS records? (if that is what
> you are saying here) What consideration motivates such a constraint? 

One of the open issues for the DELEG RR folks is what to say about
using NS records if you understand DELEG.  

One possibility is recommending "do not fall back to NS" in the
presence of a signed delegation.  I'm not making any assertions about
which way I think it should be, just observing one reason it might be
desirable.

Imagine:

example.com NS ns1.example.net
example.com DELEG 1 ns1.example.net alpn=do53
example.com DELEG 1 ns1.example.net alpn=dot
example.com DELEG 1 ns1.example.net alpn=doq
example.com RRSIG DELEG ...

Now if a DELEG-aware hardened resolver didn't talk dot or doq, and
also didn't want to fall back to unsigned NS, it would want that do53
record even though it is essentially what's in the NS.