Re: Naked domain resolution with DNSSEC

Kumar Ashutosh writes:
> I agree on CNAME behaviour. My concern here is what option does the
> customer have in case he needs contoso.com and www.contoso.com both to
> be redirected to say contoso.dnsprovider.com 

The customer in this case needs special handling by the authoritative
server to hand out address records at the apex instead.  Several DNS
providers handle this in their own software; for example, Akamai has a
feature called "toplevel name redirection" to do it.  DNS Made Easy
has what they call an "ANAME record", described at
http://www.dnsmadeeasy.com/services/aname-records/.  It isn't really
an IETF/IANA acknowledged DNS record, but rather just the way they
describe how to configure it into their system.

This is a fundamental limitation of the DNS protocol.  To achieve the
desired effect you must use some mechanism that is outside the scope
of current DNS standards documents.


_______________________________________________
dnsext mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsext