Re: NSEC version field (Re: NSEC2- and an Authenticated Denial M echanism Flag)

[roy@dnss.ec]

On Tue, 1 Jun 2004, Paul Vixie wrote:

> if NSEC2 has a new type code (and maybe RRSIG but probably not DNSKEY) and
> if we promote "want dnssec-ter" as from hop-by-hop to end-to-end (by only
> returning cached data if it was acquired using the same flags as the current
> query) then this is all pretty simple.

DS as well, to protect non NSEC2 capable resolvers being delegated
into a NSEC2 zone.

Roy

--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>