Re: [dnsext] An 5155 inconvenience

[Edward Lewis <[e-mail]>]

Read it as:

MUST BE zero for the purposes of "conformance" to RFC 5155.
And/but we are open to future updates.

At 16:27 +0100 1/20/12, Matthijs Mekking wrote:
>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>If bit 0-6 must be zero, what's the point of having them available for
>assignment?
>
>Best regards,
>   Matthijs
>
>On 01/20/2012 03:30 PM, Edward Lewis wrote:
>>  My reading of this is - if a validator is built with RFC 5155 in mind
>>  and it sees an NSEC3 RR with a flag field "other than 0 or 1" the record
>>  has been created by a signer that conforms to a more modern
>>  specification, say, RFC 17234.  (Or the signer is buggy, etc.)  As such,
>>  the validator is not equipped to deal with the situation and should
>>  complain somehow instead of proceeding.
>>
>>  At 15:17 +0100 1/20/12, Matthijs Mekking wrote:
>>  Hi,
>>
>>  Section 8.2 of RFC 5155 states that a validator MUST ignore NSEC3 RRs
>>  with a Flag fields value other than zero or one. But in the IANA
>>  Considerations section, bits 0-6 are available for assignment.
>>
>>  Could it be that Section 8.2 actually says that a validator MUST ignore
>>  bit 0-6 of the NSEC3 Flags field? Do you think this clarification is
>>  suitable for an errata or as text in dnssec-bis-updates?
>>
>>  Best regards,
>>    Matthijs
>_______________________________________________
>dnsext mailing list
>[e-mail]
>https://www.ietf.org/mailman/listinfo/dnsext
>
>-----BEGIN PGP SIGNATURE-----
>Version: GnuPG v1.4.11 (GNU/Linux)
>Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
>iQEcBAEBAgAGBQJPGYfKAAoJEA8yVCPsQCW5XzAH/A6SoczYxU1FCMynyQSZPzvT
>6nXtA89SYsB1dmEB3QRfVONmhXaRI2Ahzcvc5oqUtiMOXuFCC5Dqtu5TadKsU/+m
>tJv6qeUrzeqBBAjl3MmRno8wPfoCbSoQHc+H9jTCOIlDrGPaauiBVowg4zjES9eK
>TecyfsSrSfzmGseodp/PAXZf6fJgvFFeDRusdA8gL20P0TUzsyMB+AbvBTdfs3xk
>ZkMJx0xWm96rSSVtvx/CwMD4cjyQyMh/2gjHwKQZRbFiyetEgcJf2D+70TmEaPGp
>Y+eZ3p9CkbHB422sAk94zkhjffq/DyFjc5IiNuKlDApGuMwbW+c6jtrVGjCvbsk=
>=yHM2
>-----END PGP SIGNATURE-----

-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Edward Lewis
NeuStar                    You can leave a voice message at [phone]

Vote for the word of the day:
"Papa"razzi - father that constantly takes photos of the baby
Corpureaucracy - The institution of corporate "red tape"