rfc9859v3.txt   rfc9859.txt 
skipping to change at line 417 skipping to change at line 417
report query name is equal to the qtype received in the NOTIFY report query name is equal to the qtype received in the NOTIFY
message. Its agent domain MUST be subordinate or equal to one of the message. Its agent domain MUST be subordinate or equal to one of the
NS hostnames, as listed in the child's delegation in the parent zone. NS hostnames, as listed in the child's delegation in the parent zone.
This is to prevent malicious senders from causing the NOTIFY This is to prevent malicious senders from causing the NOTIFY
recipient to send unsolicited report queries to unrelated third recipient to send unsolicited report queries to unrelated third
parties. parties.
For example, when receiving a NOTIFY(CDS) message for "example.com" For example, when receiving a NOTIFY(CDS) message for "example.com"
with agent domain "errors.ns1.example.net", and when the requested DS with agent domain "errors.ns1.example.net", and when the requested DS
update is found to break the delegation, then the following report update is found to break the delegation, then the following report
query may be made (preferably over TCP): query with EDE code 6 (DNSSEC Bogus) may be made (preferably over
TCP):
qname: _er.59.example.com.6._er.errors.ns1.example.net. qname: _er.59.example.com.6._er.errors.ns1.example.net.
qtype: TXT qtype: TXT
4.2.2. Roles 4.2.2. Roles
While the CDS/CDNSKEY/CSYNC processing that follows the receipt of a While the CDS/CDNSKEY/CSYNC processing that follows the receipt of a
NOTIFY will often be performed by the registry, the protocol NOTIFY will often be performed by the registry, the protocol
anticipates that in some contexts (especially for ICANN gTLDs) anticipates that in some contexts (especially for ICANN gTLDs)
registrars may take on the task. In such cases, the current registrars may take on the task. In such cases, the current
 End of changes. 1 change blocks. 
1 lines changed or deleted 2 lines changed or added

This html diff was produced by rfcdiff 1.48.