Bill Manning wrote:
http://www.icann.org/committees/security/sac032.pdf
is illustrative.
| entrusted agents should provide opt-out mechanisms that
| allows clients to receive the original DNS answers to
| their queries.
[...]
| Organizations that rely on accurate NXDomain reporting
| for operational stability should choose an entrusted
| agent that asserts it will not modify DNS responses in
| its terms of service.
Certainly "illustrative" , but not affecting 2606bis ;-)
Frank
_______________________________________________
Ietf mailing list
Ietf(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/ietf