diff options
Diffstat (limited to 'draft-schanzen-gns.xml')
| -rw-r--r-- | draft-schanzen-gns.xml | 24 |
1 files changed, 12 insertions, 12 deletions
diff --git a/draft-schanzen-gns.xml b/draft-schanzen-gns.xml index 0662637..8150e21 100644 --- a/draft-schanzen-gns.xml +++ b/draft-schanzen-gns.xml | |||
| @@ -2060,20 +2060,20 @@ example.com = zk2 | |||
| 2060 | GNS2DNS record, there is no "going back". | 2060 | GNS2DNS record, there is no "going back". |
| 2061 | The (possibly recursive) resolution of the DNS name MUST NOT | 2061 | The (possibly recursive) resolution of the DNS name MUST NOT |
| 2062 | delegate back into GNS and should only follow the DNS specifications. | 2062 | delegate back into GNS and should only follow the DNS specifications. |
| 2063 | For example, names contained in CNAME records MUST NOT be | 2063 | For example, names contained in DNS CNAME records MUST NOT be |
| 2064 | interpreted as GNS names. | 2064 | interpreted as GNS names. |
| 2065 | </t> | 2065 | </t> |
| 2066 | <t> | 2066 | <t> |
| 2067 | GNS resolvers MUST offer a configuration | 2067 | GNS resolvers SHOULD offer a configuration |
| 2068 | option to disable DNS processing to avoid information leakage | 2068 | option to disable DNS processing to avoid information leakage |
| 2069 | and provide a consistent security profile for all name resolutions. | 2069 | and provide a consistent security profile for all name resolutions. |
| 2070 | Such resolvers would return an empty record set upon encountering | 2070 | Such resolvers would return an empty record set upon encountering |
| 2071 | a GNS2DNS record during the recursion. However, if GNS2DNS records | 2071 | a GNS2DNS record during the recursion. However, if GNS2DNS records |
| 2072 | are encountered in the record set for the apex and a GNS2DNS record | 2072 | are encountered in the record set for the apex and a GNS2DNS record |
| 2073 | is explicitly requested by the application, such records MUST | 2073 | is explicitly requested by the application, such records MUST |
| 2074 | still be returned, even if DNS support is disabled by the | 2074 | still be returned, even if DNS support is disabled by the |
| 2075 | GNS resolver configuration. | 2075 | GNS resolver configuration. |
| 2076 | </t> | 2076 | </t> |
| 2077 | </section> | 2077 | </section> |
| 2078 | <section anchor="cname_processing" numbered="true" toc="default"> | 2078 | <section anchor="cname_processing" numbered="true" toc="default"> |
| 2079 | <name>CNAME</name> | 2079 | <name>CNAME</name> |