On Feb 16, 2024, at 08:12, Petr Špaček <pspa...@isc.org> wrote: > > I think you describe it accurately, but people who implement resolvers in > this thread (me, Ralf, Brian W.) apparently disagree where the pain should > land - should resolvers suffer from more complex code & work, or should > signers suffer if they do something very unusual?
It's not just "the signers", it's also all the people who have signed zones, and particularly the companies who might use multiple providers. "Fail when seeing first colliding pair" is clearly worse for them than "fail when seeing first colliding triple". I keep hoping that this group will focus more on those who go through the effort to sign their zones than those who write the software. --Paul Hoffman _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
