clueing in TLD registries for delegations to non-BIND servers

At 11:33 PM +0100 2003/02/08, Bruce Campbell wrote:

>>  >  if you do not include a hints file in nsd's database, it will return
>>  >  SERVFAIL.
>
>  Actually (having burnt my fingers on this one), you really do not want to
>  configure any zones into nsd (including '.') unless you are authoritative
>  for those zones.  Since nsd is (by design) an authoritative-only
>  nameserver, any zones configured will be answered authoritatively.

	In which case, it is impossible to configure nsd to "do the right 
thing", even if this feature wasn't turned on by default.  If you 
don't configure the root zone, then you get SERVFAIL instead.  If you 
do, then you get bogus information.  We need a third way, one that 
gives us the right answer.

-- 
Brad Knowles, <brad.knowles at skynet.be>

"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
     -Benjamin Franklin, Historical Review of Pennsylvania.

GCS/IT d+(-) s:+(++)>: a C++(+++)$ UMBSHI++++$ P+>++ L+ !E-(---) W+++(--) N+
!w--- O- M++ V PS++(+++) PE- Y+(++) PGP>+++ t+(+++) 5++(+++) X++(+++) R+(+++)
tv+(+++) b+(++++) DI+(++++) D+(++) G+(++++) e++>++++ h--- r---(+++)* z(+++)