> On Apr 29, 2020, at 23:39, Viktor Dukhovni <ietf-d...@dukhovni.org> wrote: > > > For example, the spec could exclude domain > names that start with "_" or "_sentinel". And the sentinel names could > then all live there.
It already does, because the _prefix really belongs to the domain and is never a delegation. It would be a hassle if we have to make signed delegations for _tcp (for TLSA) or _opengpgkey or _smimea records. Paul _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop