Paul is correct on this - we would like a few more comments on the
clarification changes to RFC8109-bis.
Also, Willem offered some suggested text to the last paragraph of 3.3
relating to root-servers.net :

  "DNSSEC validation of the priming query is valuable when root-servers.net
zone will be DNSSEC signed and resolvers revalidate the root server
addresses, by following up with direct A and AAAA queries for the names of
the root NS RRset"

I would only offer up some slight edit:

DNSSEC validation of the priming query will be valuable when the
root-servers.net zone is DNSSEC signed.

"will be valuable when" sounds clearer than "is valuable when" but I will
leave that as a suggestion.

Some final considerations please

tim



On Thu, Jun 13, 2024 at 3:53 PM Paul Hoffman <paul.hoff...@icann.org> wrote:

> One more nudge on this, before the deadline tomorrow.
>
> --Paul Hoffman
>
>
> On Jun 5, 2024, at 09:28, Paul Hoffman <paul.hoff...@icann.org> wrote:
> >
> > Tim jumped the gun by about an hour: we just submitted the -05. It
> incorporates the suggested text from below; you can see the diff at:
> >
> https://author-tools.ietf.org/iddiff?url2=draft-ietf-dnsop-rfc8109bis-05
> >
> > FWIW, this new text is somewhat based on the findings from NLnetLabs and
> SIDN on a project supported by ICANN. You can see the report, and an
> earlier report on a related topic, at:
> >
> https://www.icann.org/resources/pages/octo-commissioned-documents-2020-11-05-en
> >
> > Please let us know if you have any issues with the changed text in the
> new version.
> >
> > --Paul Hoffman
> >
> >
> > On Jun 5, 2024, at 08:25, Tim Wicinski <tjw.i...@gmail.com> wrote:
> >>
> >> All
> >>
> >> The chairs are requesting some final comments on
> draft-ietf-dnsop-rfc8109bis. As you might recall, this document has already
> been through WGLC and had consensus to advance, but our AD reviewed it and
> raised some additional questions. (Warren Kumari, “AD Review of
> draft-ietf-dnsop-rfc8109bis,” email to the list on 31 January.)
>
>
_______________________________________________
DNSOP mailing list -- dnsop@ietf.org
To unsubscribe send an email to dnsop-le...@ietf.org

Reply via email to