IETF Logo Mail Archive

Re: How do we get the whole world to upgrade to DNSSEC capable resolvers?

David Conrad <drc@virtualized.org> Mon, 28 July 2008 01:59 UTC

Return-Path: <owner-namedroppers@ops.ietf.org>
X-Original-To: ietfarch-dnsext-archive@core3.amsl.com
Delivered-To: ietfarch-dnsext-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2864B3A692E; Sun, 27 Jul 2008 18:59:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.477
X-Spam-Level:
X-Spam-Status: No, score=-2.477 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_ORG=0.611, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_DNSWL_MED=-4, RDNS_NONE=0.1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ujMdk-0tFQ5a; Sun, 27 Jul 2008 18:59:04 -0700 (PDT)
Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 3F0613A685A; Sun, 27 Jul 2008 18:59:04 -0700 (PDT)
Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1KNHv5-00063f-TQ for namedroppers-data@psg.com; Mon, 28 Jul 2008 01:53:03 +0000
Received: from [204.152.189.190] (helo=virtualized.org) by psg.com with esmtp (Exim 4.69 (FreeBSD)) (envelope-from <drc@virtualized.org>) id 1KNHv2-000638-II for namedroppers@ops.ietf.org; Mon, 28 Jul 2008 01:53:01 +0000
Received: from [10.0.1.2] (guestroom-nat.meeting.ietf.org [130.129.64.64]) by virtualized.org (Postfix) with ESMTP id 224C42A3B26; Sun, 27 Jul 2008 18:52:58 -0700 (PDT)
Cc: DNSEXT WG <namedroppers@ops.ietf.org>
Message-Id: <A158F5F8-91F7-4FC9-82FF-16A7DBAE90EA@virtualized.org>
From: David Conrad <drc@virtualized.org>
To: bmanning@vacation.karoshi.com
In-Reply-To: <20080726165934.GA29158@vacation.karoshi.com.>
Content-Type: text/plain; charset="US-ASCII"; format="flowed"; delsp="yes"
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v928.1)
Subject: Re: How do we get the whole world to upgrade to DNSSEC capable resolvers?
Date: Mon, 28 Jul 2008 02:52:53 +0100
References: <48886C4D.4020500@ca.afilias.info> <63C0FFE7-17E6-4ECE-9A12-0537FE2E3F4B@ca.afilias.info> <4888FED2.6060204@NLnetLabs.nl> <E7388E94-D031-4059-91F9-1596A254E21C@ca.afilias.info> <20080725193101.GB8193@outpost.ds9a.nl> <BEADC795-3C76-407A-A979-2B0AAACE0328@ca.afilias.info> <20080725221002.GK29775@commandprompt.com> <OFF4F9438A.D83AC9AB-ON80257491.007DB303-C1257491.007FA301@nominet.org.uk> <20080726144111.GA5204@laperouse.bortzmeyer.org> <488B4F1B.2020104@ca.afilias.info> <20080726165934.GA29158@vacation.karoshi.com.>
X-Mailer: Apple Mail (2.928.1)
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
List-ID: <namedroppers.ops.ietf.org>

On Jul 26, 2008, at 5:59 PM, bmanning@vacation.karoshi.com wrote:
> 	how are you to -know- that the root has the "right" DS for .FR?

Because if the root didn't, then it would imply the NSes or glue could  
also be wrong.  Same process will be used to vet requests to alter all  
of these.

Regards,
-drc


--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>

v2.23.0 | Report a Bug | By Email