On 2011-06-24, at 01:41, Matthijs Mekking wrote: > I like to see Key Signing (KS) and Zone Signing (ZS) as a role of a key.
Agreed, although I prefer the term "key type" rather than "role", as "role" may be confused the controls surrounding personnel and "trusted roles". > I propose the following changes: I like the idea of merging the subsections covering key roll-overs. > I think these are fairly small changes and makes a Single Type Signing > Scheme fit more into the framework. I agree with the only remark to as calling it key types, rather than roles. If there are no objections I'll incorporate these and Olafur's suggested changes shortly and submit a -05 version of the draft. -- Fredrik _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop