(Actually, I think you can't have either!)

On Fri, Nov 18, 2016 at 7:14 AM, Ted Lemon <mel...@fugue.com> wrote:
> Which do you want?   TLSA, or delegation?  You can't have both.
>
> On Fri, Nov 18, 2016 at 6:52 AM, Mark Andrews <ma...@isc.org> wrote:
>>
>> As I said on the sunset4 mailing list this goes too far.
>>
>> I don't know about you but I want to be able to lookup TLSA records,
>> SRV and other records types for foo.localhost and localhost.
>>
>> And by the way this also requires a insecure delegation in the root
>> zone for DNSSEC to work with validating client.
>>
>> This isn't a good idea.
>>
>> Mark
>> --
>> Mark Andrews, ISC
>> 1 Seymour St., Dundas Valley, NSW 2117, Australia
>> PHONE: +61 2 9871 4742                 INTERNET: ma...@isc.org
>>
>> _______________________________________________
>> DNSOP mailing list
>> DNSOP@ietf.org
>> https://www.ietf.org/mailman/listinfo/dnsop

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to