|
North American Network Operators Group Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical Re: Change to .com/.net behavior
From: "David Schwartz" <[email protected]> > Returning NXDOMAIN when a domain does not exist is a basic requirement. > Failure to do so creates security problems. It is reasonable to require your > customers to fix known breakage that creates security problems. I agree completely. However, this is a policy breakage, not a technial one. Strictly speaking, the com and net zones are perfectly valid, as far as DNS is concerned. While I too am outraged by the actions of Verisign, I've decided to NOT modify my servers in any way. I might decide to block the sitefinder IP, but I will not change my nameservers into modifying DNS responses. Doing so would be to break things, and that is not an acceptable fix even if the other thing is in itself broken. Of course, YMMV. - Kandra
|