From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ore.jhcloos.com (ore.jhcloos.com [198.147.23.85]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "*.jhcloos.com", Issuer "CA Cert Signing Authority" (verified OK)) by huchra.bufferbloat.net (Postfix) with ESMTPS id 9B9CC21F277 for ; Wed, 30 Apr 2014 14:47:12 -0700 (PDT) Received: by ore.jhcloos.com (Postfix, from userid 10) id DB9E41E047; Wed, 30 Apr 2014 21:47:03 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jhcloos.com; s=ore14; t=1398894423; bh=pF5Qk1QSU1SvvjyG1MT9LYK1GAPUA97Rt5kDGciHpv8=; h=From:To:Cc:Subject:In-Reply-To:References:Date:From; b=NtXCrDVQnjXBoa6kvUkz2H0H4B5jVyCr/D0aGdosy/gEHFjROox1ZhkfuxW+yGyOi mEdNiz2y8SeUVy7YzH00/OKCo5V7hn/ZYIMNvOlzgMkKH/iI7c9i5ueCWo7fh72nE2 MVSE1sHvqb7fvN07zNs4IoLS/DIkDDpIzyI4jljU= Received: by carbon.jhcloos.org (Postfix, from userid 500) id 10E576001D; Wed, 30 Apr 2014 21:44:47 +0000 (UTC) From: James Cloos To: =?iso-8859-1?Q?T=F6r=F6k?= Edwin In-Reply-To: <535EB760.3010401@etorok.net> (=?iso-8859-1?Q?=22T=F6r=F6k?= Edwin"'s message of "Mon, 28 Apr 2014 23:17:36 +0300") References: <535AAE37.103@thekelleys.org.uk> <535EB760.3010401@etorok.net> User-Agent: Gnus/5.13001 (Ma Gnus v0.10) Emacs/24.4.50 (gnu/linux) Face: iVBORw0KGgoAAAANSUhEUgAAABAAAAAQAgMAAABinRfyAAAACVBMVEX///8ZGXBQKKnCrDQ3 AAAAJElEQVQImWNgQAAXzwQg4SKASgAlXIEEiwsSIYBEcLaAtMEAADJnB+kKcKioAAAAAElFTkSu QmCC Copyright: Copyright 2014 James Cloos OpenPGP: 0x997A9F17ED7DAEA6; url=https://jhcloos.com/public_key/0x997A9F17ED7DAEA6.asc OpenPGP-Fingerprint: E9E9 F828 61A4 6EA9 0F2B 63E7 997A 9F17 ED7D AEA6 Date: Wed, 30 Apr 2014 17:44:46 -0400 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Hashcash: 1:30:140430:edwin+ml-cerowrt@etorok.net::zkJIBg686kVKiHnv:000000000000000000000000000000000UvQxe X-Hashcash: 1:30:140430:cerowrt-devel@lists.bufferbloat.net::VWR3G/fddvvSUwLb:00000000000000000000000008+H+O Cc: cerowrt-devel@lists.bufferbloat.net Subject: Re: [Cerowrt-devel] [Dnsmasq-discuss] test-ipv6.com vs dnssec X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Apr 2014 21:47:29 -0000 >>>>> "TE" == Török Edwin writes: TE> or the NS reply doesn't have all the required info? Replies to NS requests include DS records iff the requests are sent to the parent of the zone, even when the requestor sets the DO bit. That is to say, when the replies are glue records. Everything is optimized for root->down verification. -JimC -- James Cloos OpenPGP: 0x997A9F17ED7DAEA6