> It feels to me DELEG / DELEXT is adding a lot of complexity for > what is ultimately a small use case (let DNS hosters update DNSSEC > KSKs) to the point where perhaps a DNS v2.0 from scratch would be > better. > > To me if feels the DELEG path is becoming more and more a stack of > nifty hacks.
I share your concern. This aspect of DELEG is the result of the introduction of new parent-side types. And, given how painful it is to introduce a single new parent-side type, to create a general mechanism that makes it easier in the future. The question then becomes, what can you do without new parent-side types. Quite a lot. But those approaches bring their own limitations and complexity. _______________________________________________ DNSOP mailing list -- [email protected] To unsubscribe send an email to [email protected]
