ietf
[Top] [All Lists]

Re: [dnsext] RFC 3484 section 6 rule 9 causing more operational problems

2009-03-05 12:27:34
 my error here - Paul said DNS does no ordering... he did not specify 
ordering of what.  we now return you to your rant.

--bill


On Wed, Mar 04, 2009 at 07:54:37PM +0000, Chris Thompson wrote:
On Mar 4 2009, OndEej SurC= wrote:

On Wed, Mar 4, 2009 at 6:57 PM, 
<bmanning(_at_)vacation(_dot_)karoshi(_dot_)com> wrote:
[...]
       DNSSEC does reorder RRSets within a zone.  Which is a new feature.

When we started talking about order of RRSets?  This is purely discussion
about order of RRs in RRSet. Order of RRSets in zone is irrelevant before
DNSSEC and also after DNSSEC. Nothing depends on order of RRSets
at least in my best knowledge.

I took Bill to mean "DNSSEC does reorder RRs within an RRset" anyway, as
I don't know in what other sense DNSSEC is relevant at all.

But the canonical ordering of RRs within an RRset for signing purposes
says nothing about the presentation order in the answers to DNS queries.
And in fact a certain well-known nameserver implementation not unassociated
with Paul still supports all the rrset-order and sortlist controls, which
work for secured zones as well as unsecured ones.

-- 
Chris Thompson
Email: cet1(_at_)cam(_dot_)ac(_dot_)uk

_______________________________________________
Ietf mailing list
Ietf(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/ietf

<Prev in Thread] Current Thread [Next in Thread>