Re: [dns-wg] RIPE's MNAME recommendation

[=?UTF-8?Q?M=C3=A5ns_Nilsson?= <]

--On den 1 oktober 2005 12.40.09 +0200 Patrik Fältström paf@localhost
wrote:

> My suggestion would be to put a domain name there in the domain that
> hosts the domain, a hostname that can receive the traffic generated  by
> any tool that uses the mname in the SOA for something.

In the interest of sanity, I'd suggest adding "should answer queries about
said domain with the AA bit set" (in addition to swallowing/properly
rejecting/processing updates and allowing/properly refusing zone
transfers). That is the The Right Thing to do, IMHO, but it might be hard
to get that kind of enforcement into any kind of document short of an ops
memo inside one organisation. I for one require it for anything I operate. 

-- 
MÃ¥ns Nilsson                    Systems Specialist
+46 70 681 7204   cell                      KTHNOC
+46 8 790 6518  office                 MN1334-RIPE

Attachment: pgp00005.pgp
Description: PGP signature