On Aug 22, 2013, at 5:13 PM, Paul Vixie <p...@redbarn.org> wrote: > Randy Bush wrote: >> < from a conversation with a friend wiser than i > >> >> the problem is that we are going through a deployment phase where there >> is little penalty for sloppy server ops because so few are validating. >> >> patching over this to be more tolerant of sloppy server ops is going in >> the wrong direction. ... > > +1. we're currently debating placement of first mover advantage. today > if you sign incorrectly you lose. with NTA at scale, if you sign > incorrectly you won't lose.
Sure you will. You screw up signing and you instantly lose. NTA allows other folks to not lose with you if they decide the pain of your screwing up to them is sufficiently high to justify manual intervention. Not everyone will make the same value judgement and they all won't make it at the same time. Regards, -drc
signature.asc
Description: Message signed with OpenPGP using GPGMail
_______________________________________________ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
