> > i think your understanding ma be incomplete. dnssec > > requires that the rrs be chained together in a particular > > order. and any change to a rr triggers resigning. it > > may be doable, but i think it would be easier to start > > with dnssec in mind.
> That makes their use of the word extension wrong, but in that case > starting over would seem (and probably is) best. i think it fits the definition of extension. the protocol is compatable with dnssec-unaware implementations. - erik
