Re: dnssec-updates text, include SOA in negative answers

[Paul Vixie <paul@vix.com>]

> Ok, but I still think we ought to reinforce the "don't include the NS set"
> in negative answers.

i don't think that's useful.  if the ns set is owned by a subdomain of the
qname or final cname, you know it's a referral, which you shouldn't believe
if it came from a full resolver (caching server) rather than from an authority.

--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>