Éric Vyncke has entered the following ballot position for draft-ietf-dnsop-dnssec-bootstrapping-09: No Objection
When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/ for more information about how to handle DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-dnsop-dnssec-bootstrapping/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- # Éric Vyncke, INT AD, comments for draft-ietf-dnsop-dnssec-bootstrapping-08 Thank you for the work put into this document, if widely used then it could help the deployment of DNSSEC. Please find below some non-blocking COMMENT points (but replies would be appreciated even if only for my own education). Special thanks to Tim Wicinski for the shepherd's detailed write-up including the WG consensus *but* it lacks the justification of the intended status and uses an old template. Other thanks to Benson Muite, the Internet directorate reviewer (at my request), please consider this int-dir review: https://datatracker.ietf.org/doc/review-ietf-dnsop-dnssec-bootstrapping-08-intdir-telechat-muite-2024-05-12/ (and I have read Peter's reply) I hope that this review helps to improve the document, Regards, -éric # COMMENTS (non-blocking) I am sympathetic to Paul Wouter's comments about 'bailiwick' and the use of "_signal". The latter is probably to late to be changed. ## Section 2 Two normative "SHOULD" but no reason/suggestion on when the SHOULD can be bypassed. ## Section 4.1.1 "example.co.uk" is not a IANA/IETF reserved domain name. Suggest to use an actual reserved domain name. Suggest to also add the RR type in the example. Perhaps explain `Publication of signaling records under the in-bailiwick domain _signal.ns3.example.co.uk is not required`. ## Section 7 Like Erik Kline, I wonder whether the IANA considerations should include a request for _dsboot. The use of _dsboot is only briefly mentioned in section 1.1, which is rather weak for a proposed standard document (I was close to open a DISCUSS on this topic). _______________________________________________ DNSOP mailing list -- dnsop@ietf.org To unsubscribe send an email to dnsop-le...@ietf.org
