dns-violations / dnsflagday

DNS flag day
https://dnsflagday.net/
147 stars 40 forks source link

[discussion] NXDOMAIN in unsigned zones does not allow other data at the same name #86

Open pspacek opened 5 years ago

pspacek commented 5 years ago

Specification: Weaker variant of https://tools.ietf.org/html/rfc8020. NXDOMAIN answer in unsigned zones does not allow other data at names which generated the NXDOMAIN answer.

Expected advantage: Better cache efficiency and resource consumptions for operators, better latency for end users.

Expected disadvantage: None

Expected implementation complexity for software developers: Small

Expected non-compliance: ? TBD. Some of known big offenders like Akamai already fixed their setups but more data is needed.

Research to confirm assumptions: TBD