Re: dns authority changes and lame servers

[Andrew Sullivan <andrew () ca afilias info>]

On Thu, Oct 18, 2007 at 12:27:35PM -0600, Mike Lewinski wrote:
> I find it exceptionally annoying that there is no process whereby the 
> root servers and/or registrars can inform us of new/modified/removed 
> delegations. 

Why can't you just query the other side of the zone cut once a
day/week/month/youpick and compare the NS set from the delegating
side to the NS set you have as the presumed authority side?  That
combined with a bit of information only you would have about which of
your mismatches are changes you're currently managing, and which are
surprises, would surely give you the data you need?

At the same time, I'll point out that registries, at least, are under
some pressure not to release too much information about this sort of
thing.  Nevertheless, various third parties are obtaining regular
zone snapshots, and then making some sort of business out of their
conclusions from the zone data.  I'd (personally, not speaking for my
employer) love to be able to offer such services, but any time a
registry operator suggests anything of the sort, people get angry.

To answer specific questions:

> 1) Does anyone else find this flaw in the DNS system as annoying as I 
> do? 

I don't think this is a "flaw in the DNS system" as much as it is a
consequence of the funny economics currently on display among domain
name registrars, DNS operators, and ISPs.

> 2) Does anyone have a better way of cleaning out the dreck than some 
> home-grown scripts? 

If you pay someone else to operate your DNS, then you get to offload
the dreck-cleaning to them!  But other than that, no.

Best regards,
A

-- 
----
Andrew Sullivan                         204-4141 Yonge Street
Afilias Canada                        Toronto, Ontario Canada
<andrew () ca afilias info>                              M2P 2A8
                                        +1 416 646 3304 x4110