Re: [DNSOP] I-D Action:draft-ietf-dnsop-rfc4641bis-01.txt

2009-04-21 Thread Florian Weimer
* Edward Lewis: > This comes from the observation that the contents of the database > sourcing the zone (whether a commercial-like database or a vi'd file) > are more critical than the private key. (If) They are sufficiently > protected and I'll just keep the private key behind the same > fortifi

Re: [DNSOP] I-D Action:draft-ietf-dnsop-rfc4641bis-01.txt

2009-04-21 Thread Edward Lewis
At 13:03 +0200 4/21/09, Shane Kerr wrote: The whole idea of offline storage for the zone itself is so fantastical An artifact in the DNSSEC concept stemming from the days when DNSSEC was discussed in the Security Area of the IETF. Fantastical is a good word. It might be more useful to re

Re: [DNSOP] I-D Action:draft-ietf-dnsop-rfc4641bis-01.txt

2009-04-21 Thread Shane Kerr
All, internet-dra...@ietf.org wrote: > Title : DNSSEC Operational Practices, Version 2 > Author(s) : O. Kolkman, M. Gieben > Filename: draft-ietf-dnsop-rfc4641bis-01.txt > Pages : 38 > Date: 2009-03-06 I had a look throug

[DNSOP] I-D Action:draft-ietf-dnsop-rfc4641bis-01.txt

2009-03-06 Thread Internet-Drafts
A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Domain Name System Operations Working Group of the IETF. Title : DNSSEC Operational Practices, Version 2 Author(s) : O. Kolkman, M. Gieben File