<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br><div><div>On Feb 20, 2013, at 10:21 PM, Vernon Schryver <<a href="mailto:vjs@rhyolite.com">vjs@rhyolite.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><span style="font-family: Monaco; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; display: inline !important; float: none; ">Today I realize I am being stupid. Trying to recursively resolve</span><br style="font-family: Monaco; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span style="font-family: Monaco; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; display: inline !important; float: none; ">requests for A RRs with ANY requests does not get the NSEC records</span><br style="font-family: Monaco; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span style="font-family: Monaco; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; display: inline !important; float: none; ">required when there are no A records. I now wonder if DNSSEC is a<span class="Apple-converted-space"> </span></span><br style="font-family: Monaco; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span style="font-family: Monaco; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; display: inline !important; float: none; ">reason to deprecate ANY. (deprecating ANY to mitigate reflection</span><br style="font-family: Monaco; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span style="font-family: Monaco; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; display: inline !important; float: none; ">attacks is wishful thinking)</span><br style="font-family: Monaco; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "></blockquote><br></div><div>This confuses me.</div><div><br></div><div>If there is any NSEC record that matches the ownername of your query then the type bitmap provides proof of the existent and non-existent records. i.e. you only need one appropriate NSEC for the QTYPE proofs.</div><div><br></div><div><br></div><div><br></div><div>--Olaf</div><br><div>
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Monaco; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><span class="Apple-style-span" style="font-family: Helvetica; font-size: 12px; "><br class="Apple-interchange-newline"><table cellspacing="0" cellpadding="0" style="background-color: rgb(255, 255, 255); border-collapse: collapse; "><tbody><tr><td rowspan="2" valign="top" style="width: 97.8px; height: 56.3px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-width: 1px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-top-color: rgb(180, 180, 180); border-right-color: transparent; border-bottom-color: transparent; border-left-color: transparent; padding-top: 5px; padding-right: 5px; padding-bottom: 5px; padding-left: 5px; "><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; text-align: right; font: normal normal normal 19px/normal 'Gill Sans'; "><font class="Apple-style-span" color="#777777"><span style="letter-spacing: 0px; "><b>NLnet<br></b></span><span style="font: normal normal normal 24px/normal 'Gill Sans'; letter-spacing: 0px; ">Labs</span></font></div></td><td valign="top" style="width: 114.5px; height: 18.1px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-width: 1px; border-right-width: 0px; border-bottom-width: 1px; border-left-width: 0px; border-top-color: rgb(180, 180, 180); border-right-color: transparent; border-bottom-color: rgb(202, 202, 202); border-left-color: transparent; padding-top: 5px; padding-right: 5px; padding-bottom: 5px; padding-left: 5px; "><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; "><span style="letter-spacing: 0px; "><font class="Apple-style-span" color="#777777">Olaf M. Kolkman</font></span></div></td><td valign="top" style="width: 2.3px; height: 18.1px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-width: 1px; border-right-width: 0px; border-bottom-width: 1px; border-left-width: 0px; border-top-color: rgb(180, 180, 180); border-right-color: transparent; border-bottom-color: rgb(202, 202, 202); border-left-color: transparent; padding-top: 5px; padding-right: 5px; padding-bottom: 5px; padding-left: 5px; "><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; min-height: 14px; "><font class="Apple-style-span" color="#777777"><br></font></div></td></tr><tr><td valign="top" style="width: 114.5px; height: 27.2px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-width: 1px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-top-color: rgb(202, 202, 202); border-right-color: transparent; border-bottom-color: transparent; border-left-color: transparent; padding-top: 5px; padding-right: 5px; padding-bottom: 5px; padding-left: 5px; "><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 9px/normal Helvetica; "><span style="text-decoration: underline; letter-spacing: 0px; "><a href="http://www.NLnetLabs.nl"><font class="Apple-style-span" color="#777777">www.NLnetLabs.nl</font></a></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 9px/normal Helvetica; "><span style="text-decoration: underline; letter-spacing: 0px; "><a href="mailto:olaf@NLnetLabs.nl"><font class="Apple-style-span" color="#777777">olaf@NLnetLabs.nl</font></a></span></div></td><td valign="top" style="width: 2.3px; height: 27.2px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-width: 1px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-top-color: rgb(202, 202, 202); border-right-color: transparent; border-bottom-color: transparent; border-left-color: transparent; padding-top: 5px; padding-right: 5px; padding-bottom: 5px; padding-left: 5px; "><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; min-height: 14px; "><font class="Apple-style-span" color="#777777"><br></font></div></td></tr><tr><td colspan="3" valign="top" style="width: 234.6px; height: 13.2px; padding-top: 5px; padding-right: 5px; padding-bottom: 5px; padding-left: 5px; "><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 9px/normal Helvetica; "><span style="letter-spacing: 0px; "><font class="Apple-style-span" color="#777777">Science Park 400, 1098 XH Amsterdam, The Netherlands</font></span></div></td></tr></tbody></table><div style="color: rgb(158, 158, 158); margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; min-height: 14px; "><br></div></span></span><br class="Apple-interchange-newline">
</div>
<br></body></html>