On Fri, 21 Jul 2017, Matthew Pounsett wrote:
Dear $VENDOR.
I'm a customer who is considering deploying the BULK RR type into my zone,
and I would like to know whether your systems support it.
Thank you,
$CUSTOMER.
Dear $CUSTOMER,
Thank you for your question. Here at $VENDOR we take pride in our
six-sigma state of the art customer focused service. We use industry
standard Apache and BIND software on most of our systems, and nginx and
NSD on the rest. Thank you for the opportunity to be of service,
Sincerely,
"Bob", $VENDOR associate customer specialist
I think you overestimate how much a typical non-specialist DNS provider
knows about their software. If you don't believe me, write to a few and
ask whether they need DS or DNSKEY to make a secure delegation.
That said.. there is still an issue with key distribution for online
signing which is required to make this work. I see the utility in BULK,
but I'm persuaded that there needs to be more work before it's deployable
in an environment where *XFR is required.
No kidding.
Regards,
John Levine, jo...@taugh.com, Taughannock Networks, Trumansburg NY
Please consider the environment before reading this e-mail. https://jl.ly
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop
