Initial request for NS set when the auth. nameservers refuse EDNS

[bortzmeyer]

https://zonemaster.fr/en/result/8d4ea300d6630f5b

mail.protection.outlook.com is badly broken. Both authoritative name servers reply FORMERR as soon as there is a EDNS option.

As a result, Zonemaster cannot start the tests. IMHO, Zomaster should retry its initial NS query without EDNS.

(There are other funny things with this server. They send the reply to a SOA query in Authority, not Answer.)

[tgreenx]

It looks like Zonemaster is sending EDNS queries by default in all cases, but it shouldn't. See https://github.com/zonemaster/zonemaster/blob/v2024.1/docs/public/specifications/tests/DNSQueryAndResponseDefaults.md.
The messages come from Basic02, which is specified to send a DNS Query.

Thanks for the report, I've already identified where the issue is, I'll provide a fix.

[matsduf]

It looks like Zonemaster is sending EDNS queries by default in all cases, but it shouldn't.

I.e. not only for Basic02?