Re: DNSSEC - Signature Only vs the MX/A issue.

Stephane Bortzmeyer <bortzmeyer@nic.fr> Tue, 28 November 2006 20:53 UTC

Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1Gp9xA-0001lU-MM; Tue, 28 Nov 2006 15:53:20 -0500
Received: from psg.com ([147.28.0.62]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Gp9x8-0004h3-Bn; Tue, 28 Nov 2006 15:53:20 -0500
Received: from majordom by psg.com with local (Exim 4.63 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1Gp9sD-00078l-LX for namedroppers-data@psg.com; Tue, 28 Nov 2006 20:48:13 +0000
X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05) on psg.com
X-Spam-Level:
X-Spam-Status: No, score=-2.6 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.1.7
Received: from [192.134.4.11] (helo=mx2.nic.fr) by psg.com with esmtp (Exim 4.63 (FreeBSD)) (envelope-from <bortzmeyer@nic.fr>) id 1Gp9s2-00077s-EO for namedroppers@ops.ietf.org; Tue, 28 Nov 2006 20:48:08 +0000
Received: from localhost (localhost.localdomain [127.0.0.1]) by mx2.nic.fr (Postfix) with ESMTP id 74F0526C3F1; Tue, 28 Nov 2006 21:48:01 +0100 (CET)
X-Virus-Scanned: by amavisd-new at mx2.nic.fr
Received: from relay2.nic.fr (relay2.nic.fr [192.134.4.163]) by mx2.nic.fr (Postfix) with ESMTP id AEF7F26C3E9; Tue, 28 Nov 2006 21:47:58 +0100 (CET)
Received: from bortzmeyer.nic.fr (batilda.nic.fr [192.134.4.69]) by relay2.nic.fr (Postfix) with ESMTP id A073058EB97; Tue, 28 Nov 2006 21:47:58 +0100 (CET)
Date: Tue, 28 Nov 2006 21:47:58 +0100
From: Stephane Bortzmeyer <bortzmeyer@nic.fr>
To: Mike StJohns <Mike.StJohns@nominum.com>
Cc: namedroppers@ops.ietf.org
Subject: Re: DNSSEC - Signature Only vs the MX/A issue.
Message-ID: <20061128204758.GA20253@nic.fr>
References: <20061127032712.CD1FE56890@shell-ng.nominum.com> <20061128135806.GA24695@nic.fr> <20061128203532.0DC4F56890@shell-ng.nominum.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <20061128203532.0DC4F56890@shell-ng.nominum.com>
X-Operating-System: Debian GNU/Linux 4.0
X-Kernel: Linux 2.6.17-2-686 i686
Organization: NIC France
X-URL: http://www.nic.fr/
User-Agent: Mutt/1.5.13 (2006-08-11)
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
X-Spam-Score: 0.0 (/)
X-Scan-Signature: d6b246023072368de71562c0ab503126

On Tue, Nov 28, 2006 at 03:13:50PM -0500,
 Mike StJohns <Mike.StJohns@nominum.com> wrote 
 a message of 25 lines which said:

> Not exactly.  See my previous note to Mark.  SO still protects the
> atomicity of an RRSet - you can delete ALL of the SRV records or
> none of them.  If you delete all of them at a label, the lookup
> fails and you can't proceed.

See Peter Koch's reply :-) Many protocols define a fallback outside of
the RRset. For instance, in
http://mirrors.isc.org/pub/www.watersprings.org/pub/id/draft-andrews-http-srv-01.txt,
there is a fallback from SRV to A.


--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>