[canvascritic]

kind of an aside, but i've always been curious about how different DNS server implementations handle TTL outliers, especially given the discrepancies between recommended values and real-world configurations. particularly re D103900 in TFA about the SOA TTL recommendation, does anyone here have insights on dealing with the rate of stale records in caches due to exceptionally high TTL values? additionally, has there been any analysis on the impact of DNSSEC chain of trust integrity with long-standing SOA EXPIRE values, like the mentioned "ma" TLD's 19 years?

[sillystuff]

Most recursive resolvers allow you to set a maximum and minumum ttl to override the supplied TTL if outside your specified range.

E.g., on unbound, cache-max-ttl and cache-min-ttl