lame delegations

Why not this?

Registrars only accept to create a glue record if there already exists
a PTR entry for the requested address that points to the right name.

-Phil

> I suspect that solving this correctly would depend on the ICANN DNSO
> recognising the authentication mechanisms of the databases of the RIR's
> under the ICANN ASO (RIPE, ARIN, APNIC).
> 
> Unfortunately, no-one thought of this problem when they let registrars
> inject host records. The only way to verify automatically that a host
> record is allowed from a given netblock is to use the same authentication
> mechanisms that (say) RIPE do for reverse delegations.