Skip to content

Commit

Permalink
Merge pull request #20 from boucadair/tireddy2-patch-1
Browse files Browse the repository at this point in the history
Add files via upload
  • Loading branch information
tireddy2 authored Feb 21, 2024
2 parents 3fc96e1 + 398a735 commit ebf2dc9
Showing 1 changed file with 5 additions and 3 deletions.
8 changes: 5 additions & 3 deletions draft-ietf-add-resolver-info.md
Original file line number Diff line number Diff line change
Expand Up @@ -117,9 +117,11 @@ Reputation:
using the RESINFO RR type and QNAME of "resolver.arpa". In this case, a client has to contend
with the risk that a resolver does not support RESINFO. The resolver might
pass the query upstream, and then the client can receive a positive RESINFO response either
from a legitimate upstream DNS resolver or an attacker. If a client sees the RESINFO in the
Answer section, it can detect that the response is not provided by the resolver
and discards the response.
from a legitimate upstream DNS resolver or an attacker. The DNS client MUST
set the Recursion Desired (RD) bit of the query to 0 to ensure that the response is provided by the resolver.
If the resolver does not support RESINFO, it will return an authoritative name error.
In addition, if a client sees the RESINFO in the Answer section, it can detect that
the response is not provided by the resolver and discards the response.

# Format of the Resolver Information {#format}

Expand Down

0 comments on commit ebf2dc9

Please sign in to comment.