Griffiths, Chris <chris_griffi...@cable.comcast.com> wrote:
> On Apr 10, 2012, at 8:11 PM, Wes Hardaker wrote:
>
> >   Suggested rewrite:
> >
> >       Furthermore, a Negative Trust Anchor MUST only be used for a
> >       short duration, perhaps for a day or less.
>
> Agreed.  Maximum time supported makes sense to me.

This only makes sense if the negative trust anchor is for a third party
domain. There are situations where it makes sense to use negative trust
anchors covering your own domains, and these might be necessary for a
long period of time (because that would require a difficult upgrade or
extensive renaming). There are more use cases than just the NASA screwup
scenario.

Tony.
-- 
f.anthony.n.finch  <d...@dotat.at>  http://dotat.at/
Shannon, Southwest Rockall: Northwesterly 5 or 6. Rough or very rough. Rain or
showers. Moderate or good.
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to