Re: [dnsext] Reminder: draft charter was posted for discussion

[Paul Vixie <[e-mail]>]

> Date: Mon, 5 Jul 2010 14:06:41 -0400
> From: Andrew Sullivan <[e-mail]>
> 
> This is a reminder that we posted some time ago a new draft charter
> for the WG.  We've had very little feedback on it.  ...
> 
> I attach it again here for your convenience.  ...
> 
> This topic will take a considerable chunk of the time we have
> scheduled in Maastricht.  The charter represents our commitments to
> the rest of the IETF.
> 
> If you have opinions on it, it would be nice to hear them.  ...

with the understanding that there's a range of possible views as to the
desireability of continued evolution in a mature deployed protocol, here
are mine.  i apologize to our WGC's for the lateness of this reply.

+---
| DRAFT charter for DNSEXT, 2010-05-28.  SUBJECT TO CHANGE
...
| The WG will consider work in the following areas:
| 
| * DNSSEC and TSIG/TKEY algorithm maintenance
| * Mechanisms that complement, or are alternatives to, TSIG and SIG(0)

since TSIG and SIG(0) are both last-mile (recursive to stub) protocols,
perhaps this bullet item would be clearer if it was amended to say:

* Last mile (recursive to stub) mechanisms that complement, or are
  alternatives to, TSIG and SIG(0); specifically including stub DNSSEC
  validation and protocol extensions to support same.

| * Hardening DNS protocol and providing guidance to implementers

the word "hardening" is at best unclear in this context.  perhaps this can
be reworded as follows:

* Improving defensibility and resiliency of DNS protocol agents by analyzing
  possible buffer overrun/underrun conditions and offering implementation
  guideance on test coverage for same.

| * Improving DNS zone synchronization mechanisms 

i think this is too specific, and should be reworded as follows:

* Improving DNS zone and DNS server configuration synchronization mechanisms 

...
| Goals and Milestones:
...
+---

i have no other comments.