I-D Action: draft-sury-dnsop-parent-centric-resolver-03.txt

Internet-Draft draft-sury-dnsop-parent-centric-resolver-03.txt is now
available.

   Title:   Parent-Centric Delegation Handling in DNS Resolvers
   Authors: Ondřej Surý
            Colin Vidal
            Evan Hunt
   Name:    draft-sury-dnsop-parent-centric-resolver-03.txt
   Pages:   25
   Dates:   2026-07-23

Abstract:

   This document specifies an optional parent-centric behavioral model
   for DNS recursive resolvers, in which delegation decisions are always
   based on the NS RRset (or DELEG RRset) received from the parent side
   of a zone cut and are never overwritten by child-side NS data.

   The parent-centric model eliminates the "two sources of truth"
   problem inherent in the current DNS delegation design, closes the
   Ghost Domain and Phoenix Domain attack vectors, provides
   deterministic behavior in the presence of parent/child NS mismatches,
   and enables resolvers to safely accept sibling (out-of-bailiwick)
   glue by scoping delegation information to individual zone cuts.  It
   also provides the behavioral foundation required for deployment of
   the DELEG extensible delegation mechanism.

   This document updates [RFC1034] and [RFC1035].

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-sury-dnsop-parent-centric-resolver/

There is also an HTMLized version available at:
https://datatracker.ietf.org/doc/html/draft-sury-dnsop-parent-centric-resolver-03

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-sury-dnsop-parent-centric-resolver-03

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]