Re: dnscache bug, or ... ?

[Charlie Brady <charlieb-dns@e-smith.com>]

On Tue, 30 Jan 2007 david@stults.com wrote:

> See the example below for what I'm referring to.  Even if I were to move
> the domain integra.net to a new provider, and the root servers were
> appropriately updated, I could keep my dnscache returning the wrong
> answers indefinitely as long as two conditions are met:
> 
> 1.  The old DNS servers respond authoritatively
> 2.  I query dnscache prior to TTL expiration on the NS records asking for
> the domain SOA.

Yes, AIUI, this is a bug in the DNS RFCs. Domain redelegation cannot work
reliably if the old DNS servers are not decommissioned. The old servers 
are rarely under the same administrative control as the new servers.

--
Charlie