Griffiths, Chris <chris_griffi...@cable.comcast.com> wrote: > On Apr 10, 2012, at 8:11 PM, Wes Hardaker wrote: > > > Suggested rewrite: > > > > Furthermore, a Negative Trust Anchor MUST only be used for a > > short duration, perhaps for a day or less. > > Agreed. Maximum time supported makes sense to me.
This only makes sense if the negative trust anchor is for a third party domain. There are situations where it makes sense to use negative trust anchors covering your own domains, and these might be necessary for a long period of time (because that would require a difficult upgrade or extensive renaming). There are more use cases than just the NASA screwup scenario. Tony. -- f.anthony.n.finch <d...@dotat.at> http://dotat.at/ Shannon, Southwest Rockall: Northwesterly 5 or 6. Rough or very rough. Rain or showers. Moderate or good. _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop