On 2/14/24, 10:14, "DNSOP on behalf of Yorgos Thessalonikefs" 
<dnsop-boun...@ietf.org on behalf of yor...@nlnetlabs.nl> wrote:

>    (actively while validating) to 4. Recent data shared in dns-oarc showed 
>    mainly 2 collisions observed in the wild and we thought 4 is a safe number.

That's certainly reasonable given the reality we live in.

If any validator ever witnessed two keys with the same key tag (owner/DNS 
security algorithm/length as well), it'd be enough to go "huh."  If you see 
three [or more], log it - I'd want to see that.

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to