What method is in place to ensure that the cache is, #1, checked before
emitting priming queries, #2, that if there is already data (complete or
partial) in the cache, how is the client supposed to determine if the
cached data is preferred over unverified, remote data? Or does the client
operate with the presumption that local data is always wrong and the best
data is always external?
Inquiring Minds want to know.
/Wm
On Thu, Oct 27, 2016 at 7:57 AM, The IESG <iesg-secretary(_at_)ietf(_dot_)org>
wrote:
The IESG has received a request from the Domain Name System Operations WG
(dnsop) to consider the following document:
- 'Initializing a DNS Resolver with Priming Queries'
<draft-ietf-dnsop-resolver-priming-09.txt> as Best Current Practice
The IESG plans to make a decision in the next few weeks, and solicits
final comments on this action. Please send substantive comments to the
ietf(_at_)ietf(_dot_)org mailing lists by 2016-11-10. Exceptionally, comments
may be
sent to iesg(_at_)ietf(_dot_)org instead. In either case, please retain the
beginning of the Subject line to allow automated sorting.
Abstract
This document describes the queries that a DNS resolver should emit
to initialize its cache. The result is that the resolver gets both a
current NS RRSet for the root zone and the necessary address
information for reaching the root servers.
The file can be obtained via
https://datatracker.ietf.org/doc/draft-ietf-dnsop-resolver-priming/
IESG discussion can be tracked via
https://datatracker.ietf.org/doc/draft-ietf-dnsop-resolver-priming/ballot/
No IPR declarations have been submitted directly on this I-D.
The document contains these normative downward references.
See RFC 3967 for additional information:
rfc5452: Measures for Making DNS More Resilient against Forged Answers
(Proposed Standard - IETF stream)
rfc4033: DNS Security Introduction and Requirements (Proposed Standard
- IETF stream)
rfc3226: DNSSEC and IPv6 A6 aware server/resolver message size
requirements (Proposed Standard - IETF stream)
Note that some of these references may already be listed in the acceptable
Downref Registry.
_______________________________________________
DNSOP mailing list
DNSOP(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/dnsop