[DNSOP] Re: How black are black lies, really?

To give an example of a user, Let's Encrypt are currently the unbound 
option of harden-below-nxdomain 
(https://community.letsencrypt.org/t/minor-dnssec-validation-change/246329) 
which implements RFC 8020 for DNSSEC signed domains.

On 18/06/2026 22:59, John R Levine wrote:
> On Thu, 18 Jun 2026, Olafur Gudmundsson wrote:
>> In the 10 years that “X lies” have been in use there has only been 
>> minimal set of complaints all all of them from
>> end-user tools, no complaints about behavior of resolvers or 
>> forwarders, as they only care about one thing:
>> “Does the record being asked about exist?” full stop.
>>
>> The existence of the name is a wider scope that only end-user-tools 
>> may care about.
>
> You don't know anyone who's using RFC 8020?  I'm not snarking, it's a 
> real question.
>
> R's,
> John
>
> PS: THe urge is great to subit an erratum for 8020 which replaces the 
> entire text sith "just kidding."
>
PS: There was another copy of this email sent from an address that can't 
send mail to the IETF, please disregard it.

_______________________________________________
DNSOP mailing list -- [email protected]
To unsubscribe send an email to [email protected]