Re: [DNSOP] I-D Action: draft-ietf-dnsop-ns-revalidation-02.txt

Dear authors.
In the second paragraph of section 3 "Upgrading NS RRset Credibility" 
there is a mention of "Positive responses...", which I am not sure of
its exact meaning. Do you mean ANSWERS>0? Or AA=1?

I'm thinking of a (broken) nameserver that responds to NSs queries with
NXDOMAIN (but does answer to other types)[1]. Is that a positive
response, which should be cached with an authoritative data ranking?

Thanks,

Hugo

[1]: https://github.com/dns-violations/dns-violations/blob/master/2018/DVE-2018-0004.md

On 13:31 07/03, internet-drafts@ietf.org wrote:
> 
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the Domain Name System Operations WG of the IETF.
> 
>         Title           : Delegation Revalidation by DNS Resolvers
>         Authors         : Shumon Huque
>                           Paul Vixie
>                           Ralph Dolmans
> 	Filename        : draft-ietf-dnsop-ns-revalidation-02.txt
> 	Pages           : 7
> 	Date            : 2022-03-07
> 
> Abstract:
>    This document recommends improved DNS [RFC1034] [RFC1035] resolver
>    behavior with respect to the processing of Name Server (NS) resource
>    record sets (RRset) during iterative resolution.  When following a
>    referral response from an authoritative server to a child zone, DNS
>    resolvers should explicitly query the authoritative NS RRset at the
>    apex of the child zone and cache this in preference to the NS RRset
>    on the parent side of the zone cut.  Resolvers should also
>    periodically revalidate the child delegation by re-quering the parent
>    zone at the expiration of the TTL of the parent side NS RRset.
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-dnsop-ns-revalidation/
> 
> There is also an HTML version available at:
> https://www.ietf.org/archive/id/draft-ietf-dnsop-ns-revalidation-02.html
> 
> A diff from the previous version is available at:
> https://www.ietf.org/rfcdiff?url2=draft-ietf-dnsop-ns-revalidation-02
> 
> 
> Internet-Drafts are also available by rsync at rsync.ietf.org::internet-drafts
> 
> 
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop
> 

Re: [DNSOP] I-D Action: draft-ietf-dnsop-ns-revalidation-02.txt

Attachment: signature.asc