The current text is: "A configured DNSKEY RR or DS RR hash of a DNSKEY RR. A validating security-aware resolver uses this public key or hash as a starting point for building the authentication chain to a signed DNS response." (Quoted from <xref target="RFC4033"/>, Section 2)
The WG has has a preference for quoting from RFCs, but there was also some hesitation about this. How would people change this, possibly updating RFC 4033?
--Paul Hoffman _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop