On 2/24/15, 17:47, "Mark Andrews" <ma...@isc.org> wrote: > >delegation-centric - a zone which consists mostly of delegations to child >zones. >the root zone and the com zone are examples of delegation-centric zones.
Not arguing, but to raise a point - my response was “all” and Mark’s is “most.” There’s a subtly to the different that bothers me. Can’t quite express it. Back when designing the DNSSEC, we were tempted to distinguish between (what I recall the term to be there) widely delegated zones from others. We decided to ditch that because when designing the protocol, when you make that distinction, you have to build into the protocol a way to make the distinction - that opened up a large set of issues. More or less, for simplicity, we discarded that distinction. I guess what I’m poorly saying, the term and definition should be given in some fixed context. (Recall BIND’s delegation-only designation as a response to a wildcard in a TLD. Later that backfired a bit when DNSSEC was added to TLDs. DNSSEC’s NSEC/NSEC3 records “broke” the rules for delegation-only.)
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop