Re: [DNSOP] Fwd: New Version Notificationfordraft-mekking-dnsop-auto-cpsync-00

2010-07-03 Thread Jakob Schlyter
On 2 jul 2010, at 17.11, Andrew Sullivan wrote: > It may surprise you to learn that there are users who do not find the > user interface for these tools, or the idea of cutting and pasting > into BIND config files, even slightly intuitive. I've personally > encountered situations where it took we

Re: [DNSOP] Fwd: New Version Notificationfordraft-mekking-dnsop-auto-cpsync-00

2010-07-03 Thread Jakob Schlyter
On 2 jul 2010, at 09.13, Wolfgang Nagele wrote: > Maybe i am missing something here, but with the publication method you also > have > the bootstrap that has to happen out-of-band. Meaning i as a child will always > have to provide my parent in a secure way (which is not established by then) > wi

Re: [DNSOP] Fwd: New Version Notificationfordraft-mekking-dnsop-auto-cpsync-00

2010-07-02 Thread Wolfgang Nagele
Hi, > It may surprise you to learn that there are users who do not find the > user interface for these tools, or the idea of cutting and pasting > into BIND config files, even slightly intuitive. I've personally > encountered situations where it took weeks to set up TSIG between two > servers. A

Re: [DNSOP] Fwd: New Version Notificationfordraft-mekking-dnsop-auto-cpsync-00

2010-07-02 Thread Andrew Sullivan
On Fri, Jul 02, 2010 at 05:42:15PM +1000, Mark Andrews wrote: > I regularly use TSIG today between my master server and the slave > servers for my zones operated by other parties. TSIG really isn't > a hard thing to setup or use. It may surprise you to learn that there are users who do not find t

Re: [DNSOP] Fwd: New Version Notificationfordraft-mekking-dnsop-auto-cpsync-00

2010-07-02 Thread George Barwood
- Original Message - From: "Wolfgang Nagele" To: "George Barwood" Cc: "Mark Andrews" ; Sent: Friday, July 02, 2010 8:13 AM Subject: Re: [DNSOP] Fwd: New Version Notificationfordraft-mekking-dnsop-auto-cpsync-00 >> This implies extra infrastructu

Re: [DNSOP] Fwd: New Version Notificationfordraft-mekking-dnsop-auto-cpsync-00

2010-07-02 Thread Mark Andrews
In message , "George Barwood" writes: > - Original Message - > From: "Mark Andrews" > To: "Shane Kerr" > Cc: "Wolfgang Nagele" ; > Sent: Friday, July 02, 2010 4:42 AM > Subject: Re: [DNSOP] Fwd: New Version > Notificationf

Re: [DNSOP] Fwd: New Version Notificationfordraft-mekking-dnsop-auto-cpsync-00

2010-07-02 Thread Wolfgang Nagele
Hi, > This implies extra infrastructure to generate and securely transmit > between > the parent and child, and administrative activity to set this up somehow. > > The publication method does not imply any administrative action other than > updating > the DNS software and activating the DNSSEC

Re: [DNSOP] Fwd: New Version Notificationfordraft-mekking-dnsop-auto-cpsync-00

2010-07-01 Thread George Barwood
- Original Message - From: "Mark Andrews" To: "Shane Kerr" Cc: "Wolfgang Nagele" ; Sent: Friday, July 02, 2010 4:42 AM Subject: Re: [DNSOP] Fwd: New Version Notificationfordraft-mekking-dnsop-auto-cpsync-00 [snip] >> I do think that George'

Re: [DNSOP] Fwd: New Version Notificationfordraft-mekking-dnsop-auto-cpsync-00

2010-06-30 Thread Tony Finch
On Wed, 30 Jun 2010, Stephan Lagerholm wrote: > > What I like about your approach is the fact that is takes advantage of > DNSSEC. My opinion is that if DNSSEC is so great it would be cool if we > can define an update mechanism that utilizes it. This could be the first > real world application for

Re: [DNSOP] Fwd: New Version Notificationfordraft-mekking-dnsop-auto-cpsync-00

2010-06-30 Thread George Barwood
- Original Message - From: "Stephan Lagerholm" To: "George Barwood" ; Sent: Wednesday, June 30, 2010 2:25 PM Subject: RE: [DNSOP] Fwd: New Version Notificationfordraft-mekking-dnsop-auto-cpsync-00 > I would encourage some type of notification mechanism so th

Re: [DNSOP] Fwd: New Version Notificationfordraft-mekking-dnsop-auto-cpsync-00

2010-06-30 Thread Stephan Lagerholm
2010 5:37 AM > To: Matthijs Mekking; dnsop@ietf.org > Subject: Re: [DNSOP] Fwd: New Version Notificationfordraft-mekking-dnsop- > auto-cpsync-00 > > I'd like to encourage some discussion of the relative merits of the UPDATE > approach > > http://www.ietf.org/id/draft-mek