Re: [DNSOP] I-D Action: draft-ietf-dnsop-ns-revalidation-02.txt

[Paul Vixie <[e-mail]>]

Hugo Salgado wrote on 2022-08-16 14:19:
> Dear authors.
> In the second paragraph of section 3 "Upgrading NS RRset Credibility"
> there is a mention of "Positive responses...", which I am not sure of
> its exact meaning. Do you mean ANSWERS>0? Or AA=1?

i think if the text were "positive responses" then your question would 
be a nonsequitur, but the actual text i see is "positive answers" which 
does indeed raise your questions.

> I'm thinking of a (broken) nameserver that responds to NSs queries with
> NXDOMAIN (but does answer to other types)[1]. Is that a positive
> response, which should be cached with an authoritative data ranking?

i think we're sending an RD=0 question to a server we think is the 
closest enclosing delegator for the zone we are revalidating, and that 
it has to answer AA=0 (because it is a delegated name) with an RRset of 
type NS, or else it's nonresponsive. i leave it to my coauthors to find 
a way using only english words to best express that constraint.

thanks.

-- 
P Vixie