[DNSOP] Re: DNSOPPossible breaking inconsistencies in draft-ietf-dnsop-rfc8624-bis-01

2024-10-15 Thread Wes Hardaker
Paul Hoffman writes: > In specific, "Use for DNSSSEC Signing" and "Use for DNSSSEC > Delegation" do not make sense if there is more than one "MUST" in that > column. You cannot use two algorithms to sign or delegate at the same > time. Thank you for the analysis. I think there are three (obviou

[DNSOP] Re: [Ext] DNSOPPossible breaking inconsistencies in draft-ietf-dnsop-rfc8624-bis-01

2024-10-15 Thread Paul Hoffman
On Oct 15, 2024, at 10:30, Peter Thomassen wrote: > On 10/15/24 19:02, Paul Hoffman wrote: In specific, "Use for DNSSSEC Signing" and "Use for DNSSSEC Delegation" do not make sense if there is more than one "MUST" in that column. You cannot use two algorithms to sign or delegate at

[DNSOP] Re: [Ext] DNSOPPossible breaking inconsistencies in draft-ietf-dnsop-rfc8624-bis-01

2024-10-15 Thread Peter Thomassen
Hi Paul, On 10/15/24 20:30, Paul Hoffman wrote: On Oct 15, 2024, at 10:30, Peter Thomassen wrote: On 10/15/24 19:02, Paul Hoffman wrote: In specific, "Use for DNSSSEC Signing" and "Use for DNSSSEC Delegation" do not make sense if there is more than one "MUST" in that column. You cannot use tw

[DNSOP] Re: [Ext] DNSOPPossible breaking inconsistencies in draft-ietf-dnsop-rfc8624-bis-01

2024-10-15 Thread Paul Hoffman
On Oct 15, 2024, at 07:49, Wes Hardaker wrote: > > Paul Hoffman writes: > >> In specific, "Use for DNSSSEC Signing" and "Use for DNSSSEC >> Delegation" do not make sense if there is more than one "MUST" in that >> column. You cannot use two algorithms to sign or delegate at the same >> time. >

[DNSOP] Re: [Ext] DNSOPPossible breaking inconsistencies in draft-ietf-dnsop-rfc8624-bis-01

2024-10-15 Thread Peter Thomassen
On 10/15/24 19:02, Paul Hoffman wrote: In specific, "Use for DNSSSEC Signing" and "Use for DNSSSEC Delegation" do not make sense if there is more than one "MUST" in that column. You cannot use two algorithms to sign or delegate at the same time. I think you misread, Paul; the second column is