Re: IESG comments on draft-ietf-dnsext-restrict-key-for-dnssec-03.txt

[Dan Massey <[e-mail]>]

Hi,

All of the changes discussed below were made and the new
draft is now available:

   draft-ietf-dnsext-restrict-key-for-dnssec-04.txt

Thanks,
Dan

Erik Nordmark wrote:

> This document was discussed by the IESG today.
> Here are the comments:
>
> Section 2.1 describes some of the differences between Application Keys
> and DNSSEC Keys. However, some of the text (e.g., reasons 3 and
> onward) use upper case MUST/SHOULD language in a confusing way. I
> suspect the intent is to describe what the existing RFCs require from
> these Keys, but it would be better to not use that terminology at all
> here (since Application keys are being deprecated, it seems odd for
> this document to be saying what one SHOULD do when processing them)
> and just describe what the differences are in a more reader-friendly
> way. For example:

<snip of example text>

MUST/SHOULD terms were removed from this section.

>
>
> Sections 4-6 would benefit from similar changes.
>
> Nits:
>
> The document sometimes capitalizes "Application key" and
> sometimes doesn't. Be consistent? (And shouldn't it then be
> "Application Key".)
>

fixed using "application key".

>
> uses "isi.edu" rather than "example.com". I don't have a big problem
> with this, but should they switch?
>

fixed using "example.com".

>
> > with a response that contain the www.isi.edu A record and SIG record.
> s/contain/contains/
>
> > the SIG and authenticate the www.isi.edu A record.  It is typical not
>
> s/typical/typically/
>

fixed

>
>    record.  Note that by placing application keys in the KEY record, a
>    resolver will need the IPSEC, email, TLS, and other key associated
>    with isi.edu if the resolver intends to authenticate the isi.edu zone
>    key (since signatures only apply to the entire KEY RR set).
>
> s/will/would/? I.e., this document is deprecated application keys, so
> this should not be "will" it seems.
>

fixed.



--
to unsubscribe send a message to [e-mail] with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>