Return-Path: X-Original-To: dnsop@ietfa.amsl.com Delivered-To: dnsop@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A4EE3A1948 for ; Fri, 1 May 2020 11:20:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=hopcount.ca Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YJWRjJy9ivVS for ; Fri, 1 May 2020 11:20:34 -0700 (PDT) Received: from mail-qv1-xf2b.google.com (mail-qv1-xf2b.google.com [IPv6:2607:f8b0:4864:20::f2b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D8BE83A1945 for ; Fri, 1 May 2020 11:20:33 -0700 (PDT) Received: by mail-qv1-xf2b.google.com with SMTP id ep1so5156867qvb.0 for ; Fri, 01 May 2020 11:20:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hopcount.ca; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=n0Q/b2ZdP3DJFS8NWx2l128hKkVJV3TNGTFq3pgi9o8=; b=lN1LnIayEYVbvg+QVyo8KsaNDN7m0ip6DSR/BdYdvfnukQYfm6AFyhJqtIfaPOPRia N+ps+STUT7lX3/QctjsUC7RTkwvpgeOOSqEE2+A3N+c/3bdzfWB23OZxWaa9t6ka5DaL 2WGnamhgnSUWL/SX1RsJfLDL7jQizw+dgttlM= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=n0Q/b2ZdP3DJFS8NWx2l128hKkVJV3TNGTFq3pgi9o8=; b=Gf3tRg1DEHvJRVN7UBK089EnK1113/GaF+VI/Xu+js16DFYoqF71H7UWDesRRtzq0M EmtanHIEvZq6Su0hcymX0AjSjtTpUyGnufWtNMivgMp/070vvLrQfSwfYXiRj5WYMJIg 5Ka3qA5iqdvPO/729UbIHYpJ3zhLCxTHGBAh2vxvmdVD1CI65msEE6+nqpfmFq2h2dg9 AFEi7NzVYcA1u/+jCAASePnmW3vUqcaFlWqo9XwrMEbhO80wb+uZb4Loxwcm7KNqTkET QDnasTW89df+KpZn/gdRLNAV9mfKH9gcJjfhQgWsVUc4XZFGsKDJTz/dkRHG39siVxSL D+SA== X-Gm-Message-State: AGi0PuaQOkaabDLyIb23QlQgmjq+sjzWPt23FMz3txRCeasbUUOkuTD4 PvCh1uq56Ypn2PJeReDhOjceTkqT0hmxGdgZ X-Google-Smtp-Source: APiQypK/WlMOImsISTuDTlGGENGoKS2oUwbBbY+p1j+uMba3EyYsfEF7ct8TzMAVjrsXVqLbPP3VAg== X-Received: by 2002:ad4:4462:: with SMTP id s2mr5214940qvt.221.1588357232681; Fri, 01 May 2020 11:20:32 -0700 (PDT) Received: from ?IPv6:2607:f2c0:e784:c7:c0aa:fef0:9558:611e? ([2607:f2c0:e784:c7:c0aa:fef0:9558:611e]) by smtp.gmail.com with ESMTPSA id d23sm3111082qkj.26.2020.05.01.11.20.31 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 01 May 2020 11:20:31 -0700 (PDT) From: Joe Abley Message-Id: Content-Type: multipart/signed; boundary="Apple-Mail=_D92E5546-7309-4CA4-866B-FCC302F3AD32"; protocol="application/pgp-signature"; micalg=pgp-sha1 Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\)) Date: Fri, 1 May 2020 14:20:29 -0400 In-Reply-To: Cc: John Levine , IETF DNSOP WG , Wes Hardaker To: Bob Harold References: <20200501014428.427E818950D7@ary.qy> X-Mailer: Apple Mail (2.3608.80.23.2.2) Archived-At: Subject: Re: [DNSOP] Call for Adoption: draft-pwouters-powerbind X-BeenThere: dnsop@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IETF DNSOP WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 May 2020 18:20:39 -0000 --Apple-Mail=_D92E5546-7309-4CA4-866B-FCC302F3AD32 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi Bob, On 1 May 2020, at 14:02, Bob Harold wrote: > Is there any chance that a user trying to reach https://example.com = could get the orphan glue A record for example.com instead of the A = record in the real zone? If the A record is orphan glue, there is no real zone (by being = orphaned, it's no longer really glue). So there's not just a chance that the A record from the parent zone = would be returned, it's expected behaviour. Joe --Apple-Mail=_D92E5546-7309-4CA4-866B-FCC302F3AD32 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- iF0EARECAB0WIQSAt40QkiztAcvphdg0jwy9hlI6LAUCXqxobQAKCRA0jwy9hlI6 LFS/AJ44d9x2qrsYltmFtkh6KaMPS7AqzwCgmA5GnLaVDIR6Ru9oErWbqawH/mo= =VE/R -----END PGP SIGNATURE----- --Apple-Mail=_D92E5546-7309-4CA4-866B-FCC302F3AD32--