Re: [idn] SC/TC equivalence

["Adam M. Costello" <amc@cs.berkeley.edu>]

Erik Nordmark <Erik.Nordmark@eng.sun.com> wrote:

> If the client asks for A and gets a respose with QNAME A'...
>
> So unless the server mains records for both A and A' (with their SIGs)
> (where A and A' really expand to all the possible combinations as in
> the UNAME) then the client needs to verify that A and A' match.

I think the server is always supposed to answer the query that was asked
(A, not A').  If maintaining records for all equivalent variants of
A' is too expensive, it could instead generate the response (and the
signature) on the fly.  It could use caching to remember the responses
for the most common variants.

AMC