Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-not-optional-02.txt

Ralf Weber <> Tue, 27 July 2021 23:18 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id 9435E3A0EE2 for <>; Tue, 27 Jul 2021 16:18:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id AdCadsuLKdcW for <>; Tue, 27 Jul 2021 16:18:49 -0700 (PDT)
Received: from ( [IPv6:2a01:4f8:a0:322c::25:42]) by (Postfix) with ESMTP id 1BE713A0EE1 for <>; Tue, 27 Jul 2021 16:18:48 -0700 (PDT)
Received: by (Postfix, from userid 107) id 844A95F40F96; Tue, 27 Jul 2021 23:18:47 +0000 (UTC)
Received: from [] ( []) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by (Postfix) with ESMTPSA id 7062C5F402E7; Tue, 27 Jul 2021 23:18:46 +0000 (UTC)
From: Ralf Weber <>
To: Mark Andrews <>
Cc: John Levine <>,,
Date: Wed, 28 Jul 2021 01:18:45 +0200
X-Mailer: MailMate (1.14r5820)
Message-ID: <>
In-Reply-To: <>
References: <20210727201504.2939B25365A4@ary.qy> <>
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit
Archived-At: <>
Subject: Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-not-optional-02.txt
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Tue, 27 Jul 2021 23:18:54 -0000


On 27 Jul 2021, at 23:19, Mark Andrews wrote:

>> On 28 Jul 2021, at 06:15, John Levine <> wrote:
>> We say that authoritative servers MUST return all the glue, which is true
>> for real glue, but not true for sibling glue (unless the sibling is in
>> a loop which is not something to encourage.)  Let's not confuse people,
>> please.
> The MUST is an instruction to developers.  It is not a comment on whether
> the record is actually required or not because there is a circular dependancy.
So if I see a MUST in an RFC it does not mean that this bit is required for
the protocol to work? That is not how I understand it. I agree with what
others have said that for DNS to work all real glue have to be presented.
Everything else, including sibling glue is optional and will make the
additional section bigger an hence more likely to get truncated.

I have no problem with authorities sticking sibling or even out of
zone glue in the additional section if they see fit. Resolver will
use or ignore that as they see fit and all of that if fine. However
requiring authorities to put unnecessary data in the additional section
(the sibbling glue) is not something I support.

So ong
Ralf Weber