whats the issue with the cycle time to validate whats in a blob you fetch, against fetching the elements inside that blob on demand and processing them?
what do you think DNS implementors do with the DS/DNSKEY validations they perform along the FQDN each time? do you think they always throw away all acquired knowledge to the root? ps I tried google translate. it worked fine. zeg je dat te pre-valideren ondertekend materialen langs een trust chain buiten aantal onmiddellijke context (x) is inherent ongeldig? Wat is de limiet op x? seconden? microseconden? On Wed, Jul 9, 2014 at 4:03 AM, Tony Finch <d...@dotat.at> wrote: > George Michaelson <g...@algebras.org> wrote: > > > are you saying that to pre-validate signed materials along a trust chain > > outside some immediate context (x) is inherently invalid? whats the limit > > on x? seconds? microseconds? > > I'm sorry I can't parse that. > > Tony. > -- > f.anthony.n.finch <d...@dotat.at> http://dotat.at/ > Viking: Variable 4 becoming north 5 to 7. Slight becoming moderate. Fog > patches then rain. Moderate or good, occasionally very poor at first. >
_______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop