[dns-wg] DNS Misbehavior Doc

On Feb 6, 2006, at 10:14 PM, David Malone wrote:

> o prevent introducing more DNS servers with such issues, testing
> of new DNS equipment should include checking that the response for
> records is in accordance with the RFCs (in particular [RFC1035],
> [RFC3597] and [RFC4074] mentioned above).


Hmmm... I'd say this recommendation is a little to "narrow".

For IPv6 misbehavior these 3 RFCs are probably sufficient but there  
are also other DNS extensions that new implementations should be able  
to deal with. Most particular the middleboxes like load balancers  
should know about protocol extensions such as EDNS0 and DNSSEC.

I understand that this document is IPv6 specific but maybe being a  
little more generic here might help implementors to realize they have  
to do more.

--Olaf

-----------------------------------------------------------
Olaf M. Kolkman
NLnet Labs
http://www.nlnetlabs.nl/



-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 227 bytes
Desc: This is a digitally signed message part
URL: <https://lists.ripe.net/ripe/mail/archives/dns-wg/attachments/20060221/9c045cce/attachment.sig>