On May 9, 2015, at 6:08 AM, Warren Kumari <war...@kumari.net> wrote: >> Two more related points: >> >> 1. In my very original comment on this matter: >> www.ietf.org/mail-archive/web/dnsop/current/msg12614.html >> I noted one other corner case, which we might also want to clarify: >> On a related note, there are some corner cases which may also be >> worth noting: queries for DS or DLV (or anything similar to that). >> So, for example, zone1.example.com/DS should still be validated even >> if there's an NTA for zone1.example.com. Again, this might sound >> obvious, but I think it's worthwhile. > > > I have spent some time trying to figure out some text that explains > this without becoming really complex and wordy. If anyone has some > text that they would be willing to send I'd appreciate it...
I'm with Warren on this: I can't think of a way to describe this without going into the whole "actually owned by the parent" dance that keeps being hard to describe for everyone. --Paul Hoffman _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
