[DNSOP] Re: DNSOPDELEXT: Proposed Delegation Type Ranges

Moin!

On 24 Aug 2026, at 20:29, John R Levine wrote:
> If you can put a type 3 record at a delegation point in a parent zone, how do you query for it explicitly?  The normal process would follow the delegation first and look for it at the apex of the child zone.

Well the stub resolver queries the resolver normally and the resolver knows that this record is authoritative at the delegation point (aka parent zone) and hence queries the servers responsible with the delegation and also validates it with the delegating zones key.


> If the answer is it's special, you look for it in the parent, then how would you look for one that really is at the apex of the child zone?

Records of all these ranges are not allowed to be below the delegation point (aka child zone) and hence a delext aware resolver will not look for them there.


> Maybe it's like DS, "don't do that", but now I'm wondering why you wouldn't always return it in the additional section of the delegation response.  I don't see that would hurt anything and it avoids that ambiguity.

Well think of a future DomainInfo record that tells e.g what other zones are considered to be owned by the same entity. This can get quite big and the resolver gains no usable information out of it, so why would you send it back for every referral?

So long
-Ralf
——-
Ralf Weber

_______________________________________________
DNSOP mailing list -- [email protected]
To unsubscribe send an email to [email protected]