Re: [dnsext] Failure to add glue MUST cause TC to be set.

Brandon Black <blblack@gmail.com> Sun, 20 February 2011 20:14 UTC

DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=twp+1dapWESK+X4T7PfiGmlLE4oVqYU1NVhBd/WdwngRBfYewwatK4E/Gin0T4Ngus bMCdOnK3ZUV+AZHFblv3aJv3OPN1LL4OHb+7fJqTdihIejjes78fLZqYDmp6od2eJDdK E1sVnzCiPD4l5D4X7fHzzNLRsZfT0nLMHep2k=
MIME-Version: 1.0
In-Reply-To: <30899A4A-833B-42EF-9850-AFEE8B8DBE02@dotat.at>
References: <20110219210716.72943A5602B@drugs.dv.isc.org> <11263.1298150425@nsa.vix.com> <20110220072916.GA3505@vacation.karoshi.com.> <30899A4A-833B-42EF-9850-AFEE8B8DBE02@dotat.at>
Date: Sun, 20 Feb 2011 14:14:52 -0600
Message-ID: <AANLkTimNujeo6KiJ4wqUU-b3qyjozVmDvR8M3XNsfmKx@mail.gmail.com>
From: Brandon Black <blblack@gmail.com>
To: Tony Finch <dot@dotat.at>
Content-Type: text/plain; charset="UTF-8"
Cc: "bmanning@vacation.karoshi.com" <bmanning@vacation.karoshi.com>, "dnsext@ietf.org" <dnsext@ietf.org>
Subject: Re: [dnsext] Failure to add glue MUST cause TC to be set.
Precedence: list

On Sun, Feb 20, 2011 at 12:48 PM, Tony Finch <dot@dotat.at> wrote:
> On 20 Feb 2011, at 07:29, bmanning@vacation.karoshi.com wrote:
>
> doesn't that cause some tension - two zones being authoritative for the
> same data?
>
> No, because a parent zone is not authoritative for NS and glue address
> records at and below a delegation point.

Isn't this really a matter of semantics?  The parent zone is
authoritative for everything beneath itself, even if it choses to use
that power of authority to give a delegation response.  e.g. the .com
servers are authoritative for www.example.com, but they choose to
delegate that answer to the NS for example.com.  If example.com's
nameservers are in-bailiwick (e.g. ns1.example.com) there's no
conflict here and the parent can (and in fact, must) provide
authoritative glue.  If example.com's nameservers are somewhere
underneath .org, there's not much point in providing the glue, as a
secure resolver wouldn't believe you anyways.

[dnsext] Failure to add glue MUST cause TC to be … Mark Andrews
Re: [dnsext] Failure to add glue MUST cause TC to… Paul Vixie
Re: [dnsext] Failure to add glue MUST cause TC to… bmanning
Re: [dnsext] Failure to add glue MUST cause TC to… Tony Finch
Re: [dnsext] Failure to add glue MUST cause TC to… George Barwood
Re: [dnsext] Failure to add glue MUST cause TC to… Brandon Black
Re: [dnsext] Failure to add glue MUST cause TC to… Mark Andrews
[dnsext] zone cut semantics Jim Reid
Re: [dnsext] Failure to add glue MUST cause TC to… George Barwood
Re: [dnsext] Failure to add glue MUST cause TC to… Mark Andrews
Re: [dnsext] Failure to add glue MUST cause TC to… Brandon Black
Re: [dnsext] Failure to add glue MUST cause TC to… George Barwood
Re: [dnsext] Failure to add glue MUST cause TC to… Mark Andrews
Re: [dnsext] Failure to add glue MUST cause TC to… Mark Andrews
Re: [dnsext] Failure to add glue MUST cause TC to… James Mitchell
Re: [dnsext] Failure to add glue MUST cause TC to… Brandon Black
Re: [dnsext] Failure to add glue MUST cause TC to… Masataka Ohta
Re: [dnsext] zone cut semantics Brandon Black
Re: [dnsext] Failure to add glue MUST cause TC to… Mark Andrews
Re: [dnsext] zone cut semantics Jay Ashworth
Re: [dnsext] zone cut semantics Jim Reid
Re: [dnsext] zone cut semantics Brandon Black
Re: [dnsext] zone cut semantics Jay Ashworth
Re: [dnsext] zone cut semantics Joe Abley
Re: [dnsext] zone cut semantics Olafur Gudmundsson
Re: [dnsext] Failure to add glue MUST cause TC to… Florian Weimer
Re: [dnsext] Failure to add glue MUST cause TC to… Tony Finch
Re: [dnsext] Failure to add glue MUST cause TC to… Tony Finch
Re: [dnsext] zone cut semantics W.C.A. Wijngaards
Re: [dnsext] zone cut semantics Michael Graff
Re: [dnsext] Failure to add glue MUST cause TC to… George Barwood
Re: [dnsext] Failure to add glue MUST cause TC to… George Barwood
Re: [dnsext] Failure to add glue MUST cause TC to… Mark Andrews
Re: [dnsext] Failure to add glue MUST cause TC to… George Barwood
Re: [dnsext] Failure to add glue MUST cause TC to… Joe Abley