[dnsext] [Technical Errata Reported] RFC4470 (6734)
RFC Errata System <rfc-editor@rfc-editor.org> Fri, 12 November 2021 03:08 UTC
Return-Path: <wwwrun@rfc-editor.org>
X-Original-To: dnsext@ietfa.amsl.com
Delivered-To: dnsext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98BA83A10E8 for <dnsext@ietfa.amsl.com>; Thu, 11 Nov 2021 19:08:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d_lasw7bQWtT for <dnsext@ietfa.amsl.com>; Thu, 11 Nov 2021 19:08:39 -0800 (PST)
Received: from rfc-editor.org (rfc-editor.org [IPv6:2001:1900:3001:11::31]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E45113A10E7 for <dnsext@ietf.org>; Thu, 11 Nov 2021 19:08:39 -0800 (PST)
Received: by rfc-editor.org (Postfix, from userid 499) id A7D0820EB4B; Thu, 11 Nov 2021 19:08:37 -0800 (PST)
To: weiler@tislabs.com, johani@autonomica.se, ek.ietf@gmail.com, evyncke@cisco.com, ogud@ogud.com, ajs@anvilwalrusden.com
From: RFC Errata System <rfc-editor@rfc-editor.org>
Cc: marka@isc.org, dnsext@ietf.org, rfc-editor@rfc-editor.org
Content-Type: text/plain; charset="UTF-8"
Message-Id: <20211112030837.A7D0820EB4B@rfc-editor.org>
Date: Thu, 11 Nov 2021 19:08:37 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsext/CI3XPjABp24OvqLQJKXf12XDDZY>
Subject: [dnsext] [Technical Errata Reported] RFC4470 (6734)
X-BeenThere: dnsext@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: DNS Extensions working group discussion list <dnsext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsext>, <mailto:dnsext-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsext/>
List-Post: <mailto:dnsext@ietf.org>
List-Help: <mailto:dnsext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsext>, <mailto:dnsext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Nov 2021 03:08:45 -0000
The following errata report has been submitted for RFC4470, "Minimally Covering NSEC Records and DNSSEC On-line Signing". -------------------------------------- You may review the report below and at: https://www.rfc-editor.org/errata/eid6734 -------------------------------------- Type: Technical Reported by: Mark Andrews <marka@isc.org> Section: 4 Original Text ------------- The first of these NSEC RRs proves that no exact match for foo.example.com exists, and the second proves that there is no wildcard in example.com. Corrected Text -------------- TBD Notes ----- "the second proves that there is no wildcard in example.com" is incorrect. \)555555555555555 555555555555555 555555555555555 555555555555555 55.example.com 3600 IN NSEC RFCNOTES_TEXT0.*.example.com ( NSEC RRSIG ) Actually proves that *.example.com exists as it is part of the next field. It is an empty non-terminal wildcard. 'RFCNOTES_TEXT0.domain' can only be used to prove no data exists at 'domain', not that 'domain' doesn't exist. Instructions: ------------- This erratum is currently posted as "Reported". If necessary, please use "Reply All" to discuss whether it should be verified or rejected. When a decision is reached, the verifying party can log in to change the status and edit the report, if necessary. -------------------------------------- RFC4470 (draft-ietf-dnsext-dnssec-online-signing-02) -------------------------------------- Title : Minimally Covering NSEC Records and DNSSEC On-line Signing Publication Date : April 2006 Author(s) : S. Weiler, J. Ihren Category : PROPOSED STANDARD Source : DNS Extensions Area : Internet Stream : IETF Verifying Party : IESG
- [dnsext] [Technical Errata Reported] RFC4470 (673… RFC Errata System
- Re: [dnsext] [Technical Errata Reported] RFC4470 … Mark Andrews