dnsflagday
dnsflagday copied to clipboard
[discussion] strict RFC 8020: There Really Is Nothing Underneath
Specification: https://tools.ietf.org/html/rfc8020
Expected advantage: Better cache efficiency and resource consumptions for operators, better latency for end users. Better protection again some dumb types of random subdomain attacks.
Expected disadvantage: See https://tools.ietf.org/html/rfc8020#section-5 and https://tools.ietf.org/html/rfc8020#section-7 . It might not be a good idea for unsigned zones.
Expected implementation complexity for software developers: Medium?
Expected non-compliance: ? TBD, same as for #86
Research to confirm assumptions: TBD, similar to #86
This is my vote. Remove the hacks for qname minimization and start doing aggressive NXDOMAIN pruning. As noted in the intro comment this is essentially the same as #86, and I'd personally consider them all to be the same issue.