Re: [DNSOP] Unusual behavior (wildcarding) on .cn TLD

[Stephane Bortzmeyer <bortzmeyer at nic.fr>]

On Fri, Oct 30, 2009 at 11:54:06AM -0700,
 Nicholas Weaver <nweaver at ICSI.Berkeley.EDU> wrote 
 a message of 49 lines which said:

> Has anyone else observed the following behavior for the .cn TLD, 

Yes. It was reported by Florian Weimer on the dns-operations mailing
list.

> one authoritative server (NS.CERNET.NET) wildcards invalid domains,
> but the others (a-e.dns.cn) do not?

It's more fun than that: it also depends if the QNAME is 7-bits ASCII
or not.

> Anyone know someone operationally involved with the .cn TLD to know
> if this is deliberate and, if so, why?

I reported the issue to CNNIC. I'll be in Beijing tomorrow so we may
discuss it in more detail.