[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: DNSSEC - Signature Only vs the MX/A issue.



Stephane Bortzmeyer wrote:
> On Tue, Nov 28, 2006 at 03:13:50PM -0500,
>  Mike StJohns <Mike.StJohns@nominum.com> wrote 
>  a message of 25 lines which said:
> 
>> Not exactly.  See my previous note to Mark.  SO still protects the
>> atomicity of an RRSet - you can delete ALL of the SRV records or
>> none of them.  If you delete all of them at a label, the lookup
>> fails and you can't proceed.
> 
> See Peter Koch's reply :-) Many protocols define a fallback outside of
> the RRset. For instance, in
> http://mirrors.isc.org/pub/www.watersprings.org/pub/id/draft-andrews-http-srv-01.txt,
> there is a fallback from SRV to A.

Similarly, RFC 3263 defines fallback from NAPTR to SRV (at a different
but related name), followed by fallback to A and AAAA.

-- 
=====================================================================
Josh Littlefield                                  Cisco Systems, Inc.
joshl@cisco.com                             1414 Massachusetts Avenue
tel: 978-936-1379  fax: 978-936-2226       Boxborough, MA  01719-2205

--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>