022 at 16:36
To: DNSOP Working Group
Subject: Re: [DNSOP] New Version Notification for
draft-yorgos-dnsop-dry-run-dnssec-01.txt
Dear dnsop,
We submitted a new version of a “dry-run DNSSEC” draft. The draft
describes a method that allows for testing DNSSEC deployments in real
world DNS(SEC) deplo
On Jul 28, 2022, at 15:15, Dave Lawrence wrote:
>
> I am not in favour of yet another change to DNSSEC bits without a much
> larger demonstration of value than what this proposal has. It's not
> that I think this one has no value, I just think that the bulk of its
> value is achievable via oth
I am not in favour of yet another change to DNSSEC bits without a much
larger demonstration of value than what this proposal has. It's not
that I think this one has no value, I just think that the bulk of its
value is achievable via other mechanisms.
While it is true that there could be more user
On 15. 07. 22 14:36, George Thessalonikefs wrote:
Hi Libor,
Thanks for the time and feedback!
If you prefer the dry-run DS to have a static length maybe then you are
more interested in the dry-run equivalent algorithm per actual algorithm
timeline?
It would be interesting to know if your c
Hi Libor,
Thanks for the time and feedback!
If you prefer the dry-run DS to have a static length maybe then you are
more interested in the dry-run equivalent algorithm per actual algorithm
timeline?
It would be interesting to know if your concern for static length arises
from a registry poi
Hi Willem, Yorgos, Roy, dnsop,
I dare to repeat my support for the ideas in dry-run-dnssec draft.
However, I still don't like the suggested format of dry-run DS record.
Another alternative idea: how about putting the Digest Type into the
first octet of Digest field like in the draft, but cropping
Dear dnsop,
We submitted a new version of a “dry-run DNSSEC” draft. The draft
describes a method that allows for testing DNSSEC deployments in real
world DNS(SEC) deployments without affecting the DNS service in case of
DNSSEC errors. Any encountered errors are signaled to the DNS operator
of the
