On 2011-06-24, at 01:41, Matthijs Mekking wrote:

> I like to see Key Signing (KS) and Zone Signing (ZS) as a role of a key.

Agreed, although I prefer the term "key type" rather than "role", as "role" may 
be confused the controls surrounding personnel and "trusted roles".

> I propose the following changes:

I like the idea of merging the subsections covering key roll-overs. 

> I think these are fairly small changes and makes a Single Type Signing
> Scheme fit more into the framework.

I agree with the only remark to as calling it key types, rather than roles. If 
there are no objections I'll incorporate these and Olafur's suggested changes 
shortly and submit a -05 version of the draft.

-- Fredrik

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to