Re: NSEC+-epsilon (whitelies server) proof of concept.

["Olaf M. Kolkman" <olaf@ripe.net>]

On Mon, 29 Nov 2004 14:04:55 +0000 (GMT)
geoff@nominet.org.uk (Geoffrey Sisson) wrote:

> However in a delegation-only domain, the owner names of glue RRs may
>  still be 255 octets in length.  Any optimisation involving restriction
>  of maximum length would require ensuring that no owner name of any
>  glue RR exceeded the restriction.  However I don't believe such a
>  restriction would be unpopular with registrants: at the moment there
>  are only two glue RRs in the co.uk zone which are longer than the
>  maximum label size alone.


Glue is just glue and since it is not part of your zone it will not be
signed and there will not be NSEC RRs generated for the glue ownernames.

In any of the optimization you perform you do not have to do any magic
that takes into acount the glue RRs.

I think :-) ....

-- Olaf

---------------------------------| Olaf M. Kolkman
---------------------------------| RIPE NCC


--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>