On Oct 15, 2024, at 10:30, Peter Thomassen <pe...@desec.io> wrote: > On 10/15/24 19:02, Paul Hoffman wrote: >>>> In specific, "Use for DNSSSEC Signing" and "Use for DNSSSEC >>>> Delegation" do not make sense if there is more than one "MUST" in that >>>> column. You cannot use two algorithms to sign or delegate at the same >>>> time. > > I think you misread, Paul; the second column is "use for validation" (not > delegation).
I think I did not. The draft adds "Use for DNSSEC Delegation" to the table in section 4. That column in that table has the same "MUST but MAY" problem I brought up. --Paul Hoffman _______________________________________________ DNSOP mailing list -- dnsop@ietf.org To unsubscribe send an email to dnsop-le...@ietf.org
