> On 23 Mar 2018, at 11:55 am, Mark Andrews <ma...@isc.org> wrote:
>
> This title of this document DOES NOT match reality.
>
> "A Sentinel for Detecting Trusted Keys in DNSSEC” should be
> replaced by “A Root Key Trust Anchor Sentinel for DNSSEC”.
>
> kskroll-sentinel-<what>-<id> really needs something other
> than “kskroll” as the first field. “root-key-sentinel-<what>-<id>”
> really more clearly matches what it does.
>
> Any other changes that follow from these two changes"
If we want to make this generic then we need at least two sets
of labels. One set for the root so we can avoid the single label issue
and one set for other TA’s which encode the TA’s name in the query.
e.g.
“ta-sentinel-<what>-<id>.<ta-name>.”
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop
