Hi Jan,
On 24 May 2016, at 15:10 , Jan Včelak <jan.vcelak(a)nic.cz> wrote:
Let's jump directly into it:
- The previous version was inconsistent in setting the TC flag for
delegations with a glue. We have decided to modify the behavior
slightly and the TC flag is now set always if a complete glue doesn't
fit the response.
Umm. I think that's in violation of the protocol, or at least a misinterpretation of
the protocol.
The coherency requirement for DNS is that the contents of the Answer and Authority
sections should be complete, otherwise set TC=1 to signal that they are not.
The Additional section is explicitly not part of the requirement, regardless of whether it
contains glue, DNSKEYs or something else. The reason is that different servers may have
different amounts of Additional data available, hence it is not possible to put the
Additional section under the coherency requirement.
What was the previous inconsistency that you needed to resolve?
Regards,
Johan