David C Lawrence

Note that although the text describes it as a 16 character password, it is displayed as a 19 character password because of spaces. If you copy and paste it will...

I just found this issue because I was looking to see if there was a way to run mcaselector for our headless VMs, so please count me as a strong...

While I'd like to see 0x20, I question whether it really has much value. While it is one more source of anti-spoofing entropy we could use, we already don't really...

Note that during the DNS-OARC panel session on 12 May 2019 there was also discussion on whether to address UDP fragmentation problems, with a couple of mechanisms proposed. I don't...

Examples? What should be done when they don't?

> I should like to echo this as a DNS Flag day 'no more workarounds' issue - and to broaden it to beyond AAAA query responses. > > The scenarios...

> (although note in passing that 'not responding at all' versus SERVFAIL can cause operational problems for some resolvers and thus accessibility problems for the zone owners and any other...

Specifically the Z bit. Mark's been doing tests that show that if it is set in the request then various misbehaviours occur with regard to the response. Per his message...

This is my vote. Remove the hacks for qname minimization and start doing aggressive NXDOMAIN pruning. As noted in the intro comment this is essentially the same as #86, and...

Your suspicious are both correct. They will only respond to ECS from known resolvers with whom they have a contractual relationship, and relationship they have with Akamai does not permit...