Re: [DNSOP] I-D Action: draft-ietf-dnsop-compact-denial-of-existence-03.txt

[Dave Lawrence <[e-mail]>]

Stephane Bortzmeyer writes:
> > One current implementation does not differentiate DO=0 vs 1 and gives the
> > same NODATA answer for both cases.
> 
> Yes. I see no practical problem with that but, from a philosophical
> point of view, it disturbs me. Naive clients may make wrong
> conclusions from the NODATA answer. 

Very much so, and not just naive programmatic clients but also
non-naive real-life human clients.  I myself have been misled by
noerror/nodata where nxdomain would have been correct.  It's
frustrating.

nxdomain is usefully distinct and auth servers really ought to be
strongly encouraged to return it where applicable.