[DNSOP] Protocol Action: 'DNS Glue Requirements in Referral Responses' to Proposed Standard (draft-ietf-dnsop-glue-is-not-optional-09.txt)

2023-06-14 Thread The IESG
The IESG has approved the following document: - 'DNS Glue Requirements in Referral Responses' (draft-ietf-dnsop-glue-is-not-optional-09.txt) as Proposed Standard This document is the product of the Domain Name System Operations Working Group. The IESG contact persons are Warren Kumari and Rober

Re: [DNSOP] Current status of draft-ietf-dnsop-dnssec-validator-requirements

2023-06-14 Thread Peter Thomassen
Hi Christian, On 6/14/23 11:55, Christian Huitema wrote: In the old model, we are very concerned about third parties spoofing responses and polluting resolver caches. In a secure transport model, the only parties that can spoof responses are the resolvers themselves: authoritative resolvers a

Re: [DNSOP] Current status of draft-ietf-dnsop-dnssec-validator-requirements

2023-06-14 Thread Christian Huitema
I know that the feedback was due last Sunday, but here comes mine anyhow, after looking at the latest iteration of the draft. The draft makes a number of recommendations, which seem all reasonable, but what struck me was the weak tie between these recommendations and the security consideration

Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-not-optional-09.txt

2023-06-14 Thread Wessels, Duane
Thanks to all the IESG reviewers for their feedback. We've made the following updates in revision -09: - No more uppercase RFC2119 keywords in the abstract - Added a reference to the DNS terminology RFC - Added a reference to the dig command At this point the authors believe the IESG feedback h

[DNSOP] I-D Action: draft-ietf-dnsop-glue-is-not-optional-09.txt

2023-06-14 Thread internet-drafts
A New Internet-Draft is available from the on-line Internet-Drafts directories. This Internet-Draft is a work item of the Domain Name System Operations (DNSOP) WG of the IETF. Title : DNS Glue Requirements in Referral Responses Authors : M. Andrews Sh