Re: [DNSOP] Making draft-ietf-dnsop-kskroll-sentinel apply to all zones

2017-12-20 Thread Geoff Huston
> On 16 Dec 2017, at 2:31 am, Paul Hoffman wrote: > > On 14 Dec 2017, at 21:45, Geoff Huston wrote: > >>> Please see . >>> This is a small set of changes that make the draft not treat the root zone >>> as special. It allows the lab

Re: [DNSOP] Making draft-ietf-dnsop-kskroll-sentinel apply to all zones

2017-12-20 Thread Geoff Huston
> On 16 Dec 2017, at 2:37 am, Joe Abley wrote: > > On 15 Dec 2017, at 10:31, Paul Hoffman wrote: > >> On 14 Dec 2017, at 21:45, Geoff Huston wrote: >> >>> I agree the mechanics of the change in the text, and even in the code for >>> support this are pretty minor, but I am slightly worried a

Re: [DNSOP] Making draft-ietf-dnsop-kskroll-sentinel apply to all zones

2017-12-15 Thread Ralph Dolmans
Hi, On 15-12-17 02:51, Paul Hoffman wrote: > Please see > . This is a > small set of changes that make the draft not treat the root zone as > special. It allows the labels to be used for any zone, not just the root. I agree that a mecha

Re: [DNSOP] Making draft-ietf-dnsop-kskroll-sentinel apply to all zones

2017-12-15 Thread Joe Abley
On 15 Dec 2017, at 11:24, Matt Larson wrote: >> On Dec 15, 2017, at 10:37 AM, Joe Abley wrote: >> >> In practical terms anybody who has a non-root trust anchor installed has a >> bidirectional operational relationship with the people who publish it. >> Synchronising that trust anchor, with th

Re: [DNSOP] Making draft-ietf-dnsop-kskroll-sentinel apply to all zones

2017-12-15 Thread Matt Larson
> On Dec 15, 2017, at 10:37 AM, Joe Abley wrote: > > In practical terms anybody who has a non-root trust anchor installed has a > bidirectional operational relationship with the people who publish it. > Synchronising that trust anchor, with the glorious benefit of a full list of > relying par

Re: [DNSOP] Making draft-ietf-dnsop-kskroll-sentinel apply to all zones

2017-12-15 Thread Matt Larson
> On Dec 15, 2017, at 10:48 AM, Paul Hoffman wrote: > >> While it's conceptually elegant to have this mechanism easily available to >> the operator of nameservers for any zone, it's not clear to me that this is >> supported by a tangible use case. > > A TLD operator who doesn't really like th

Re: [DNSOP] Making draft-ietf-dnsop-kskroll-sentinel apply to all zones

2017-12-15 Thread Paul Hoffman
On 15 Dec 2017, at 7:37, Joe Abley wrote: On 15 Dec 2017, at 10:31, Paul Hoffman wrote: On 14 Dec 2017, at 21:45, Geoff Huston wrote: I agree the mechanics of the change in the text, and even in the code for support this are pretty minor, but I am slightly worried about the intended genera

Re: [DNSOP] Making draft-ietf-dnsop-kskroll-sentinel apply to all zones

2017-12-15 Thread Joe Abley
On 15 Dec 2017, at 10:31, Paul Hoffman wrote: > On 14 Dec 2017, at 21:45, Geoff Huston wrote: > >> I agree the mechanics of the change in the text, and even in the code for >> support this are pretty minor, but I am slightly worried about the intended >> generality of the proposed change being

Re: [DNSOP] Making draft-ietf-dnsop-kskroll-sentinel apply to all zones

2017-12-15 Thread Paul Hoffman
On 14 Dec 2017, at 21:45, Geoff Huston wrote: Please see . This is a small set of changes that make the draft not treat the root zone as special. It allows the labels to be used for any zone, not just the root. Could you please

Re: [DNSOP] Making draft-ietf-dnsop-kskroll-sentinel apply to all zones

2017-12-14 Thread Geoff Huston
Hi Paul, > On 15 Dec 2017, at 12:51 pm, Paul Hoffman wrote: > > Please see . > This is a small set of changes that make the draft not treat the root zone as > special. It allows the labels to be used for any zone, not just the root.

[DNSOP] Making draft-ietf-dnsop-kskroll-sentinel apply to all zones

2017-12-14 Thread Paul Hoffman
Please see . This is a small set of changes that make the draft not treat the root zone as special. It allows the labels to be used for any zone, not just the root. --Paul Hoffman ___ DNS