Bugzilla – Bug 1397
Recursive DS lookups for AS112 zones names should recurse.
Last modified: 2017-08-07 13:36:02 CEST
While RFC 6303 permits local zones to answer these names they still need to follow all the resolution rules. DS records for these names belong to the parent zone and as long as the client is requesting recursion and the server allows recursion for the client they the query should recurse.
Hi Mark, Yes you are right. Nasty for downstream lookups of nxdomains (or nonDNSSEC trust points) for those DS records, who then don't get the recursive lookup for the DS record but a canned nodata answer. Best regards, Wouter
Hi Mark, Fixed. Thank you for the report! Best regards, Wouter