Re: [sitefinder-tech-discuss] Pseudo code please

[Owen DeLong <owen@delong.com>]

--On Wednesday, October 22, 2003 03:09:05 PM -0400 David Blacka <davidb@verisignlabs.com> wrote:

> On Wednesday 22 October 2003 01:10 pm, Kee Hinckley wrote:
>
> > Given a hostname provided by a user (e.g. foo.example.com), how do I
> > determine that the result I get back when I lookup the A record
> > corresponds to something provided by example.com rather than
> > something generated by Verisign?
>
> I think that you are now asking a totally different question.  However,
> this question has a good answer.
No, he clarified the same question and made the clarification TOO specific...

The real question is:
       Given a hostname provided to my resolver library, how do I return
       a result which is different depending on whether the A record
       lookup returns an A record created by the nameservers which are
       authoritative for foo.example.com vs. an A record synthesized
       from a wildcard at a higher-level zone?

> You can generally tell what zone an answer is coming from by looking at the
> AUTHORITY second of the DNS response.  You should generally see either a
> NS RRset (for "positive" responses) or an SOA (for "negative" responses).
> The name of the NS RRset or the SOA is the name of the zone that the
> answer is coming from.
Verisign is authoritative for .com/.net.  Therefore, they are authoritative
for all synthetic records under that.  They may or may not be authoritative
for zones under .com/.net (e.g. verisign.com vs. delong.com).  Thus, you still
have not answered the question.

Owen

Attachment: pgpKaKwKiAcQZ.pgp
Description: PGP signature