Re: [Danish] Proposed WG Charter

[Viktor Dukhovni <[e-mail]>]

On Mon, Jun 14, 2021 at 08:59:45PM -0400, Shumon Huque wrote:

> I can also say from personal experience that deploying DNSSEC in
> a large complex enterprise remains extremely challenging. Some of the
> largest commercial DNS providers in the world have had constant
> challenges handling the scale of my employer's signed DNS (ask me
> offline sometime and I'll spill the beans). And just a few weeks ago, I
> found another critical DNSSEC bug in one of the major open source
> DNS implementations.

For new applications one need not sign an existing legacy domain,
it is easy to register a new dedicated domain that's signed from
the getgo.

There may be some minor obstacles along the way, but it rather looks
like the software stacks are or will soon be ready to meet them head on.

The specs produced by DANISH will not change the world overnight, the
design should not be anchored in the past.

-- 
    Viktor.