On 18/01/2018 23:06, Mark Andrews via RT wrote: > We do not need to change the session nonce. A simple sequence number > will prevent replay insertion into the stream and we have that in > “_ser” which rndc increases on every transaction. The server is > already looking for replays and rejects them. AFAICS that's only happening in the code that's commented as being necessary for UDP packet duplication, which is what raised this discussion in the first place since we don't use UDP for RNDC. If that code is *not* just for UDP, could the comments please be fixed?