>If not, can you suggest changes that would get your support for advancing it? 
>(“Send text” if possible!)

It's closer than I had remembered.

In the problem paragraph that starts at the bottom of page 6, on
domain names that have been commandeered, I'd like it to say that
there is no agreement on how to decide that a name has been
comandeered, nor if or how to revisit a name to decide that it's been
uncomandeered.

(For that last, I'm thinking about .BELKIN, where the routers that
leak the name will eventually all fail, or .CORP where people may use
it less now that CAs don't sign certs any more.)

I'd also like a mention of DNSSEC.  DNSSEC is intended to provide a
signature chain from the root to any leaf, but there is no way to
chain to a SUTLD.  There's also no agreement what to do with DNSSEC
and existing SUTLDs, whether to have DNSSEC say they don't exist, or
to create some sort of unsigned pseudo-delegation, or something else.

R's,
John

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to