Re: [Danish] Proposed WG Charter

On Tue, Jun 15, 2021 at 10:22 AM Michael Richardson <mcr+ietf@sandelman.ca>
wrote:

>
> Viktor Dukhovni <ietf-dane@dukhovni.org> wrote:
>     >> I can also say from personal experience that deploying DNSSEC in
>     >> a large complex enterprise remains extremely challenging. Some of
> the
>     >> largest commercial DNS providers in the world have had constant
>     >> challenges handling the scale of my employer's signed DNS (ask me
>     >> offline sometime and I'll spill the beans). And just a few weeks
> ago, I
>     >> found another critical DNSSEC bug in one of the major open source
>     >> DNS implementations.
>
>     > For new applications one need not sign an existing legacy domain,
>     > it is easy to register a new dedicated domain that's signed from
>     > the getgo.
>
> I was going to say the same thing.
> It also has the advantage of not having to deal with the marketing
> department.
>
> {However, it's a shame that example.com can't register devices.example.com
> directly.... or rather that DNSSEC can't jump over the insecured
> example.com.}
> So one winds up with devices-example.com or some such situation.
>

Purchasing a new domain for work use, when you work within a large company,
isn't always quick or easy. Sometimes you have an existing delegation to
work with (labs.example) and if DNSSEC is not a requirement for
exploration, you don't need to go through justification and procurement
before getting started.

>     > There may be some minor obstacles along the way, but it rather looks
>     > like the software stacks are or will soon be ready to meet them head
> on.
>
>     > The specs produced by DANISH will not change the world overnight, the
>     > design should not be anchored in the past.
>
> We are in agreement here:  that's why I removed the mitigation as a work
> item
> from the initial charter.  I think that we should still think about it
> though.
>
> --
> Michael Richardson <mcr+IETF@sandelman.ca>   . o O ( IPv6 IøT consulting )
>            Sandelman Software Works Inc, Ottawa and Worldwide
> --
> Danish mailing list
> Danish@ietf.org
> https://www.ietf.org/mailman/listinfo/danish
>

-- 

*Ash Wilson* | Technical Director
*e:* ash.wilson@valimail.com

This email and all data transmitted with it contains confidential and/or
proprietary information intended solely for the use of individual(s)
authorized to receive it. If you are not an intended and authorized
recipient you are hereby notified of any use, disclosure, copying or
distribution of the information included in this transmission is prohibited
and may be unlawful. Please immediately notify the sender by replying to
this email and then delete it from your system.