On Nov 26, 2018, at 10:36 AM, Ted Lemon <mel...@fugue.com> wrote: > On Mon, Nov 26, 2018 at 1:29 PM Paul Hoffman <paul.hoff...@icann.org> wrote: > Once you are inside a network (the N in VPN), it's "my network, my policy" > all over again. > > Can you unpack what you mean by this? I assume you don't mean that we > should provide a mechanism whereby network operators can automatically > override DNSSEC trust anchors!
For names that are only available within a trusted network, yes I really mean that. --Paul Hoffman
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
