At Sat, 9 May 2015 15:08:11 +0200, Warren Kumari <war...@kumari.net> wrote:
> > 1. In my very original comment on this matter: > > www.ietf.org/mail-archive/web/dnsop/current/msg12614.html > > I noted one other corner case, which we might also want to clarify: > > On a related note, there are some corner cases which may also be > > worth noting: queries for DS or DLV (or anything similar to that). > > So, for example, zone1.example.com/DS should still be validated even > > if there's an NTA for zone1.example.com. Again, this might sound > > obvious, but I think it's worthwhile. > > I have spent some time trying to figure out some text that explains > this without becoming really complex and wordy. If anyone has some > text that they would be willing to send I'd appreciate it... I didn't think we'd need wordy text to explain this, but I wouldn't be opposed to omitting this topic from this document. In practice, it wouldn't matter much whether we validate zone1.example.com/DS in the example case since everything else on and under zone1.example.com won't be validated anyway. -- JINMEI, Tatuya _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop