Re: RFC 4470 bitmap (Was Re: Authenticated denial of existence...)

Matthijs Mekking <[email protected]> wrote:

> It is not clear to me that this sentence only refers to the on-demand
> NSEC records.

I think the other sentence in the same paragraph makes it clear that the
whole paragraph is about NXDOMAIN responses:

   The generated NSEC record's type bitmap MUST have the RRSIG and NSEC
   bits set and SHOULD NOT have any other bits set.  This relaxes the
   requirement in Section 2.3 of RFC4035 that NSEC RRs not appear at
   names that did not exist before the zone was signed.

Tony.
-- 
f.anthony.n.finch  <[email protected]>  http://dotat.at/
Forties, Cromarty: East, veering southeast, 4 or 5, occasionally 6 at first.
Rough, becoming slight or moderate. Showers, rain at first. Moderate or good,
occasionally poor at first.
_______________________________________________
dnsext mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsext