Late to the party, but I also support this draft. I read the latest version and I like it. Some comments below. Apologies if there are duplicate comments.

Best regards,
Matthijs


Section 2.1
-----------

I notice that notifies for DNSKEY have been removed since the initial implementation. I guess that is fine, since we can specify it in a follow-up document, and the current specification allows for extension.


Section 3
---------
"There MUST NOT be more than one DSYNC record for each combination of rrtype and scheme."

I wonder what the argument is for this. Doesn't this prevent redundancy and failover for notification targets?


Section 4.1
-----------
1. "Construct the lookup name, by injecting the _dsync label after the first label of the delegation owner name."

Okay, this is technically correct, but let me say that I was confused by "delegation owner name". I read it as the owner that delegates your zone, a.k.a. the parent. Probably because "delegation name" or "delegation owner name" is not something frequently used.

I was going to comment that some clarification was needed how to find the delegation owner name, but then I read step 3 and that sort of does the same thing.

Anyway, many words for something that probably does not require a change.


2. "If a DSYNC RRset results, return it."

This reads weird. I guess something like "If there is a validated positive DSYNC answer, return it".


The example in step 3 uses city.ise.mie.jp, but there are domain names reserved for documentation purposes ("example.", "example.com.", "example.net.", "example.org.", and any names falling within those domains), so let's use one of these for the example.

_______________________________________________
DNSOP mailing list -- dnsop@ietf.org
To unsubscribe send an email to dnsop-le...@ietf.org

Reply via email to