Re: [dnsext] Reminder: two WGLC closing in one week

Florian Weimer <fweimer@bfk.de> Thu, 02 October 2008 08:45 UTC

Return-Path: <owner-namedroppers@ops.ietf.org>
X-Original-To: ietfarch-dnsext-archive@core3.amsl.com
Delivered-To: ietfarch-dnsext-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 65CBB3A691D; Thu, 2 Oct 2008 01:45:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.75
X-Spam-Level:
X-Spam-Status: No, score=0.75 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_EQ_DE=0.35, HELO_MISMATCH_DE=1.448, RDNS_NONE=0.1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VTNl74FkNNeq; Thu, 2 Oct 2008 01:45:44 -0700 (PDT)
Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 60BAE3A6848; Thu, 2 Oct 2008 01:45:44 -0700 (PDT)
Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1KlJhz-000DDl-JG for namedroppers-data@psg.com; Thu, 02 Oct 2008 08:38:51 +0000
Received: from [193.227.124.2] (helo=mx01.bfk.de) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from <fweimer@bfk.de>) id 1KlJht-000DCb-L9 for namedroppers@ops.ietf.org; Thu, 02 Oct 2008 08:38:49 +0000
Received: from mx00.int.bfk.de ([10.119.110.2]) by mx01.bfk.de with esmtps (TLS-1.0:RSA_AES_256_CBC_SHA1:32) id 1KlJha-0000Lf-DY; Thu, 02 Oct 2008 10:38:26 +0200
Received: from fweimer by bfk.de with local id 1KlJhf-0005dg-T4; Thu, 02 Oct 2008 10:38:35 +0200
To: Mark Andrews <Mark_Andrews@isc.org>
Cc: Andrew Sullivan <ajs@commandprompt.com>, namedroppers@ops.ietf.org
Subject: Re: [dnsext] Reminder: two WGLC closing in one week
References: <200809262103.m8QL3USA067104@drugs.dv.isc.org>
From: Florian Weimer <fweimer@bfk.de>
Date: Thu, 02 Oct 2008 10:38:29 +0200
In-Reply-To: <200809262103.m8QL3USA067104@drugs.dv.isc.org> (Mark Andrews's message of "Sat, 27 Sep 2008 07:03:30 +1000")
Message-ID: <8263ob2xyy.fsf@mid.bfk.de>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
List-ID: <namedroppers.ops.ietf.org>

* Mark Andrews:

>> DO necessarily implies UD because the synthesized CNAME is not signed
>> and thus not visible to a DNSSEC client (section 3.1).
>
> 	DO indicates that you want the DNSSEC records.

DO was originally conceived as "intent to validate".  It's not used
this way, though.

> 	UD indicates that you don't want the synthesised CNAME.
>
> 	There are cases where you don't want DO to imply UD.
> 	Think humans reading the output.

If UD is debugging-only, I don't think it's worth the effort.

-- 
Florian Weimer                <fweimer@bfk.de>
BFK edv-consulting GmbH       http://www.bfk.de/
Kriegsstraße 100              tel: +49-721-96201-1
D-76133 Karlsruhe             fax: +49-721-96201-99

--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>