Re: Naked domain resolution with DNSSEC

"John Levine" <[email protected]> 23 Oct 2013 19:54:47 -0000
Newsgroups gmane.ietf.dnsext
Message-ID <[email protected]>
>How will such a customer ensure that both www.contoso.com and
>contoso.com get pointed to contoso.provider.com."

I've done it by provisioning.  My DNS management software has a hack
that says that one name has the same A/AAAA as some other name.  Every
few hours a daemon runs down the list, and if the target address has
changed, it updates the local name.

This is a hack, but it's the least bad one I know in this situation.

Note that this also makes it a lot easier handle the fairly common
situation that the web server is hosted one place and the mail is
hosted in another, and the web host has no way to install MX records
that point anywhere other than itself.

R's,
John
_______________________________________________
dnsext mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsext