Hi, On Sat, Jun 08, 2019 at 04:14:57PM +0000, Job Snijders wrote:
On Fri, Jun 07, 2019 at 06:53:37PM +0000, Torbjörn Eklöv wrote:
On 7 Jun 2019, at 20:39, Måns Nilsson <mans.axel.nilsson@svt.se> wrote:
And, open resolvers have no place on authoritative servers. Full stop.
+100 Måns!
This is all great and I agree. However, it is not RIPE NCC's place to dictate what one does on one's servers/services. Unless RIPE NCC has a financial stake in the operation, I'd prefer it if they don't make any evaluations and just do as instructed.
Well, I assume they *do* as instructed: do checks on the sanity of the request, as per consensus in the DNS WG. Which is the place to discuss whether to change said consensus. I, for one, am a great fan of having as strict DNS checks as possible - because for everyone who can convincingly explain to me that *he* is the big exception and this really is not something he wants to have, I see 1000 broken DNS setups where having whatever checks in place is a very good thing. (I maintain our DNS infrastructure, so I see a lot of "interesting" approaches to DNS...) Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard, Michael Emmer Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279