Re: [DNSOP] New Version Notification for draft-wkumari-dnsop-root-loopback-01.txt

2014-11-12 Thread Mark Andrews
In message , Tony Finch writes: > Paul Hoffman wrote: > > > > > I thought the idea of validating the zone transfer before putting the zone > > > live was interesting. I could probably lash up a script to do that along > > > the lines of the following, though it also needs to check the KSK matche

Re: [DNSOP] New Version Notification for draft-wkumari-dnsop-root-loopback-01.txt

2014-11-11 Thread Tony Finch
Paul Hoffman wrote: > > > I thought the idea of validating the zone transfer before putting the zone > > live was interesting. I could probably lash up a script to do that along > > the lines of the following, though it also needs to check the KSK matches > > the trust anchor. > > > > for server i

Re: [DNSOP] New Version Notification for draft-wkumari-dnsop-root-loopback-01.txt

2014-11-11 Thread Paul Hoffman
On Nov 11, 2014, at 11:07 AM, Tony Finch wrote: > I have been running with a similar config on my toy nameserver for nearly > a year, That makes me feel better about our assertion that we probably did not invent this. > and it is reasonably satisfactory. That makes me feel better in general. :