Bill Manning wrote: > http://www.icann.org/committees/security/sac032.pdf > is illustrative. | entrusted agents should provide opt-out mechanisms that | allows clients to receive the original DNS answers to | their queries. [...] | Organizations that rely on accurate NXDomain reporting | for operational stability should choose an entrusted | agent that asserts it will not modify DNS responses in | its terms of service. Certainly "illustrative" , but not affecting 2606bis ;-) Frank _______________________________________________ Ietf@xxxxxxxx https://www.ietf.org/mailman/listinfo/ietf