Re: Summary: What to do with expired signatures

[Edward Lewis <[e-mail]>]

At 9:40 AM -0500 2/12/02, Paul Vixie wrote:
>> I think the issue is a bit more significant than an implementation detail.
>> Personally, this thread has convinced me that the servers should not edit
>> zones in any way.
>
>I was astounded that anyone here even thought that that was debatable.

I'm confused by this response.

Are you saying that this issue "is" just an implementation detail?  Or are
you saying that "servers should not edit zones" is undebateable?

>> Dynamic delete is an exception.  It is an acceptable exception in that
>> dynamic update is sufficiently independent of the action of
>> publishing/distributing data.  It is a complication of the zone loading
>> process, not the zone serving process.
>
>The zone whatting process?  I have here a server with persistent zone storate.
>All zone changes are made by RFC2136 "UPDATE" requests.  There is no "load"
>and there is no "zone file" and there is no way to map your "implied delete"
>to any process that it has.  Yet this server is entirely protocol compliant.

This is entirely philosophical:  Dynamic update accomplishes the same thing
as sending a change request to the appropriate person, editing the zone
file and reloading the zone.  The serial number is updated, and the if the
zone is signed, new signatures are produced as needed.  Dynamic update does
this much more quickly than the "old" way.  That's why I said that dynamic
update is related to zone loading.  As far as being a "complication,"
dynamic update is a new process - meaning that there are now more ways to
get data into a zone.

The fact that this is protocol compliant isn't a debate.  I was just trying
to decide if dynamic update was a symptom of middleboxness or not.

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Edward Lewis                                                NAI Labs
Phone: [phone]                      Email: [e-mail]

Do you have the time to listen to me whine
About nothing and everything all at once?
-- Green Day ("Basket Case")

Opinions expressed are property of my evil twin, not my employer.



to unsubscribe send a message to [e-mail] with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>