Subject: [dnsext] Re: NSEC3 confusion (in .org)

From: Stephane Bortzmeyer <[email-masked]>
Date: Fri, 4 Sep 2009 13:58:31 +0200

On Tue, Aug 11, 2009 at 10:10:57AM +1000,
 Mark Andrews <[email-masked]> wrote 
 a message of 66 lines which said:

> 	The same thing happens in COM, NET and I presume all other
> 	zones with a registry/registrar model.  The registrars really
> 	should be pulling the glue records as well.  It's up to the
> 	registry enforce this however.

For the record, after a check in .FR (because it was a new and unusual
problem), we publish the glue only if the domain itself is
published. (And so the question of "promoting" the glue does not
apply.)

A domain cannot be deleted if there are nameservers beneath it, but it
can still be unpublished (potentially leaving dangling references to
name servers in it.)