search

ietf-wg-add / draft-ietf-add-split-horizon-authority

Establishing Local DNS Authority in Split-Horizon Environments
Other
1 stars 3 forks source link

Section 6.1/the "tamperproof" external resolver might be blocked (Comment John Scudder) #66

Closed boucadair closed 5 months ago

boucadair commented 5 months ago

Section 6.1

In some cases, due either to an adversarial network or more innocent reasons, the query to the "tamperproof" external resolver might be blocked and never return an answer. I think with a close reading of the document this is OK because "clients MUST resolve the Verification Record for that name" and in the blocked case, it won't be resolved and so the MUST won't be fulfilled. Nonetheless, I wonder if it would be worth adding a few sentences about this case.

boucadair commented 5 months ago

see #68