Re: [dnsext] Short introduction to zone cuts?

In message <68D9EB4A-78FB-428D-B312-165343DDB9FF@vpnc.org>, Paul Hoffman writes
:
> On Mar 16, 2012, at 4:36 PM, Mark Andrews wrote:
> 
> > 
> > In message <946E9EC4-9872-4A98-BCEB-3CD7420929A1@vpnc.org>, Paul Hoffman wr
> ites
> > :
> >> Over on the dns-operations list, the issue of zone cuts has come up, and e
> ven
> >> normally-careful people have gotten it wrong. Is there a readable introduc
> ti
> >> on to zone cuts and how they affect zone operators? If not, someone should
>  re
> >> ally consider writing a two-page informational RFC on the subject and have
>  it
> >> reviewed here (even if it is after this WG shuts down) before publication.
>  I
> >> suspect that such an RFC will be more valuable to the Internet than many o
> f 
> >> the ones we have done here.
> >> 
> >> --Paul Hoffman
> > 
> > RFC 1034 say all you need to say for zone operators about NS record.
> 
> As we have seen, the text in RFC 1034 has not been sufficient to prevent erro
> rs. A clearly-written document might help prevent errors. Some of us would pr
> efer to prevent errors rather than just criticize the people who cannot read 
> the source documents as well as you can.

Please go survey those that have made errors and ask them if there
are supposed to be matching NS records in the parent and child
zones.  I know that ISC's error a couple of weeks back were not due
to lack of knowledge.

There are lots of documents on the net on how to delegate a zone.
Of those I've checked they all say to add matching NS records to
the parent zone.  One more won't help.  People either don't read,
make a mistake, or deliberately choose to do the wrong thing.

> > Nameserver developer need to know more.
> 
> And, as such, would be valuable to document in an informational RFC, given th
> at we see errors in that all the time. The two sets of information are quite 
> related.

We already have documents that tell implementors what to do.  

> --Paul Hoffman
> 
> _______________________________________________
> dnsext mailing list
> dnsext@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsext
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka@isc.org
_______________________________________________
dnsext mailing list
dnsext@ietf.org
https://www.ietf.org/mailman/listinfo/dnsext