IronPort-PHdr: =?us-ascii?q?9a23=3ANq2K+hJVUYS4tHtfF9mcpTZWNBhigK39O0sv0r?=
 =?us-ascii?q?FitYgfLPvxwZ3uMQTl6Ol3ixeRBMOHsqoC1Lqd6vy8EUU7or+5+EgYd5JNUx?=
 =?us-ascii?q?JXwe43pCcHRPC/NEvgMfTxZDY7FskRHHVs/nW8LFQHUJ2mPw6arXK99yMdFQ?=
 =?us-ascii?q?viPgRpOOv1BpTSj8Oq3Oyu5pHfeQpFiCehbb9oLhi7rgrdutQZjIZtN6081g?=
 =?us-ascii?q?bHrnxUdupM2GhmP0iTnxHy5sex+J5s7SFdsO8/+sBDTKv3Yb02QaRXAzo6PW?=
 =?us-ascii?q?814tbrtQTYQguU+nQcSGQWnQFWDAXD8Rr3Q43+sir+tup6xSmaIcj7Rq06VD?=
 =?us-ascii?q?i+86tmTgLjhTwZPDAl7m7Yls1wjLpaoB2/oRx/35XUa5yROPZnY6/RYc8WSW?=
 =?us-ascii?q?9HU81MVSJOH5m8YpMPAeQfIOhYs4fzqVgArRS8BAmjGOzgxyRHhnPq2K03yf?=
 =?us-ascii?q?gtHR3Y0AEmAtkAsG7UrNLwNKoKX+y6zLfHzS7Yb/xI3Tf985DEeQ0vr/GRR7?=
 =?us-ascii?q?1wd9TexUcyHA7Ck1qRp5LqPyiO1usTt2ib9PFtVfyxhG49qgFxuTmvxsgqio?=
 =?us-ascii?q?XTmo0VzVXE+Dx/zY0oJtO4UFZ2bcO4HJdKqi2XNYV7Ttk/T2xotis20LILtJ?=
 =?us-ascii?q?qjcCQX1Jgr3QPTZv6bf4SS/x7uW+WcLS1liH9mYL6/iQi9/Eu8xuD5U8S7yl?=
 =?us-ascii?q?VHoy5endTJuH0ByQHc58mCR/Rm+kqs2DSC2gXd5+xKI007iKzWIIM7zLEqjJ?=
 =?us-ascii?q?ocq0HDEzfzmEXxkaCZaF0p+vOt6+T7erXmoYKcN5NshgH+LKsunsu/DPwlPw?=
 =?us-ascii?q?YSR2aX5OSz2qXs80L4XLlGkOc6krfFv5DdP8QbvrS1DBVI3Yo59Ra/FSym0N?=
 =?us-ascii?q?ICkXYbK1JFfQqLj4nvO17QPPD1Feqzj0i2nDt2xf3LMKftDojNI3XNirvscr?=
 =?us-ascii?q?Jw51ZZyAUpzNBf45xUCqsGIPL2QkL+qdLZAQEiMwyv3ennDM5925gAWW2RGK?=
 =?us-ascii?q?+ZMbjSsV6H5uIpOeWDeIgVuDPlJ/g/+/HulWM5mUMafaSx2psXbHS4HvV9Lk?=
 =?us-ascii?q?SYf3Xsg8sBHX0WsQo5VObqkkGNUSZPZ3auWKIx/jQ7B5i6DYffXY2inLuB3C?=
 =?us-ascii?q?GmHp1Qe29GEE2MEXLye4qYXPcMbTqYItV9nTwcSbihV4gh2Amzuw/80LpnKf?=
 =?us-ascii?q?LU9zYZtZ39yNh16ffflRYo9Tx7XIyh1DSqS2V11l0BQT8x3qk39Ut5zlarw6?=
 =?us-ascii?q?V5n7pTEooAyelOV1JwCpPH1OF+EJS6dh/IeNrDAAKqXdi9Gjw1VfovzsUPeE?=
 =?us-ascii?q?dyHZOpiRWVjHniOKMci7HeXM98yanbxXWkYp8lk3s=3D?=
From: "Wessels, Duane" <dwessels@verisign.com>
To: Olli Vanhoja <olli@zeit.co>
CC: Matthew Pounsett <matt@conundrum.com>, "dnsop@ietf.org" <dnsop@ietf.org>
Thread-Topic: Re: [EXTERNAL] [DNSOP] I-D Action:
 draft-wessels-dns-zone-digest-06.txt
Thread-Index: AQHU40/OX2yFWUG8oEWCjrMLhz7nMA==
Date: Mon, 25 Mar 2019 21:15:01 +0000
Message-ID: <0E8CD2BB-C8C6-4387-8FAD-DAC84B381557@verisign.com>
References: <155009468256.9559.12509906855495134896@ietfa.amsl.com>
 <923006F8-EB5A-4098-81A2-782BC90BF220@verisign.com>
 <CAAiTEH_GmvNVgAZzwG+oaQrtNd_b=kpDSRz7ErbmTjuXrzziWg@mail.gmail.com>
 <CABrJZ5FBYpFrjpm-a+B9FF8rbVNXwy=V-MP0TPS8fG87OJeteg@mail.gmail.com>
In-Reply-To: <CABrJZ5FBYpFrjpm-a+B9FF8rbVNXwy=V-MP0TPS8fG87OJeteg@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
Content-Type: multipart/signed;
 boundary="Apple-Mail=_D0C18CF5-9205-4F9D-B1FC-BA3A800AF70E";
 protocol="application/pkcs7-signature"; micalg=sha1
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/-QkuQd7Lt695-IBL3XFtD5KjTs8>
Subject: Re: [DNSOP] I-D Action: draft-wessels-dns-zone-digest-06.txt
Precedence: list

--Apple-Mail=_D0C18CF5-9205-4F9D-B1FC-BA3A800AF70E
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii



> On Mar 25, 2019, at 3:47 PM, Olli Vanhoja <olli@zeit.co> wrote:
>=20
>> Section 3.2. discussion:  Unless there's a potential benefit to =
non-apex ZONEMD records that I'm not seeing, I think it makes sense to =
forbid them.  Was there a particular thing that could be enabled by =
that, which prompted the suggestion?
>=20
> I agree with this. I believe it would create unnecessary complexity.
> For example, which records would such a digest cover? Would the apex
> record cover also the records covered by this subdigest?

Matt / Olli,

I'm not aware of anything that could be enabled by non-apex ZONEMD =
records. My preference would be to forbid non-apex ZONEMD records.

I guess my concern was just that it means implementors need to check for =
this and treat the RR type somewhat specially, as they do for SOA and =
maybe a couple other RR types.

DW


--Apple-Mail=_D0C18CF5-9205-4F9D-B1FC-BA3A800AF70E
Content-Disposition: attachment; filename="smime.p7s"
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64

MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIHVDCCB1Aw
ggY4oAMCAQICEDeSnEmT+J13cIlh9m0rcrswDQYJKoZIhvcNAQELBQAwgckxCzAJBgNVBAYTAlVT
MR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3Qg
TmV0d29yazE1MDMGA1UECxMsQ2xhc3MgMiBNYW5hZ2VkIFBLSSBJbmRpdmlkdWFsIFN1YnNjcmli
ZXIgQ0ExQzBBBgNVBAMTOlN5bWFudGVjIENsYXNzIDIgU2hhcmVkIEludGVybWVkaWF0ZSBDZXJ0
aWZpY2F0ZSBBdXRob3JpdHkwHhcNMTgwMzI0MDAwMDAwWhcNMTkwNDIzMjM1OTU5WjBwMSQwIgYJ
KoZIhvcNAQkBFhVkd2Vzc2Vsc0B2ZXJpc2lnbi5jb20xFzAVBgNVBAMMDldlc3NlbHMsIER1YW5l
MRYwFAYDVQQLDA1FTlRFUlBSSVNFIElUMRcwFQYDVQQKDA5WZXJpU2lnbiwgSW5jLjCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAIMxorssL5C3FQkj4EJR3vR0qjI4GWU+i5Iag0r4fmvz
ztea5S/DGId5e/zIUq7ISXOYf58Y7tZYP8G7y5QiuYQucLg/C6duA5AYKCrgL/ms6QZpAvLX+0l6
nABgK36BXBv3Gn8TSAPl0ATx/r0OXn4YEIN68H1Bl5MF6qluelqfsQXRuQVyqquTd6hRUDpz+Ba7
NjTyekZRWoMdrk9Uuxxsv2Dshn2lEP/21ftKkRvzY7CXxiNQ3ne0FR34OWWO1D6zyeYcppu/YAmh
zn720W99QIlhRPLIJmnPKl/uy1DFEFXPFDYGAohWRJOtkHKARrfjPUjIsHjEhYhP60gSYDECAwEA
AaOCA4owggOGMAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgWgMBYGA1UdJQEB/wQMMAoGCCsG
AQUFBwMEMB0GA1UdDgQWBBRWhUpoLXEQ8H0RYqrd1avCyQi5+TAgBgNVHREEGTAXgRVkd2Vzc2Vs
c0B2ZXJpc2lnbi5jb20wHwYDVR0jBBgwFoAU2EgpqF8qF5Li+p57729gg/i4uNwwggFwBggrBgEF
BQcBAQSCAWIwggFeMCcGCCsGAQUFBzABhhtodHRwOi8vcGtpLW9jc3Auc3ltYXV0aC5jb20wggEx
BggrBgEFBQcwAoaCASNsZGFwOi8vZGlyZWN0b3J5LnN5bWF1dGguY29tL0NOJTIwJTNEJTIwU3lt
YW50ZWMlMjBDbGFzcyUyMDIlMjBTaGFyZWQlMjBJbnRlcm1lZGlhdGUlMjBDZXJ0aWZpY2F0ZSUy
MEF1dGhvcml0eSUyQ09VJTIwJTNEJTIwQ2xhc3MlMjAyJTIwTWFuYWdlZCUyMFBLSSUyMEluZGl2
aWR1YWwlMjBTdWJzY3JpYmVyJTIwQ0ElMkNPVSUyMCUzRCUyMFN5bWFudGVjJTIwVHJ1c3QlMjBO
ZXR3b3JrJTJDTyUyMCUzRCUyMFN5bWFudGVjJTIwQ29ycG9yYXRpb24lMkNDJTIwJTNEJTIwVVM/
Y0FDZXJ0aWZpY2F0ZTtiaW5hcnkwXQYDVR0fBFYwVDBSoFCgToZMaHR0cDovL3BraS1jcmwuc3lt
YXV0aC5jb20vY2FfMDdiYjdkNjQ3N2NmNGY2YmU5NmFmMWIzNmNhYmQzMTYvTGF0ZXN0Q1JMLmNy
bDBsBgNVHSAEZTBjMGEGC2CGSAGG+EUBBxcCMFIwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuc3lt
YXV0aC5jb20vY3BzMCgGCCsGAQUFBwICMBwaGmh0dHA6Ly93d3cuc3ltYXV0aC5jb20vcnBhMEIG
CSqGSIb3DQEJDwQ1MDMwCgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMAsGCWCGSAFlAwQBFjALBglg
hkgBZQMEASowLAYKYIZIAYb4RQEQAwQeMBwGEmCGSAGG+EUBEAECAgEBi/HGCRYGMjQ3NjY0MDkG
CmCGSAGG+EUBEAUEKzApAgEAFiRhSFIwY0hNNkx5OXdhMmt0Y21FdWMzbHRZWFYwYUM1amIyMD0w
DQYJKoZIhvcNAQELBQADggEBAIa7pvgh+pRug/8Wp7lp/FC5YKOSB8wRs54s9UCw+U3VpoamorrN
j1VC7DZjwd/g3kKvu6vFQyHbB6hmt2jCqo+aO/W0G9CvzrXwhY11IQhbI1CWExXAtoIqk7DWg31r
hR6ly1Lf1SXVCTN0ZN3aklqgtkdvySQLqQwayWRTlahccKhd9ixrL7/rBXbl3FBy6wPqNwbtHWZJ
byn459INhZ6wOfsPHqr/5xZrpSbcMHVNMrmwvuXwZakMPG/oNQR4aFTcqw96ANa3RKmQC2ziG8/c
CwwCVKwjgOSlTODjKXa4YNxc49v58EXLYLfDvxIY/LJENT3EZTb3W4A5RKdzXD8xggRNMIIESQIB
ATCB3jCByTELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYD
VQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMTUwMwYDVQQLEyxDbGFzcyAyIE1hbmFnZWQgUEtJ
IEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQTFDMEEGA1UEAxM6U3ltYW50ZWMgQ2xhc3MgMiBTaGFy
ZWQgSW50ZXJtZWRpYXRlIENlcnRpZmljYXRlIEF1dGhvcml0eQIQN5KcSZP4nXdwiWH2bStyuzAJ
BgUrDgMCGgUAoIICQzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0x
OTAzMjUxODE0NTlaMCMGCSqGSIb3DQEJBDEWBBRmukj2uA7VvjsgzL7xGyEMu10IpjCB7wYJKwYB
BAGCNxAEMYHhMIHeMIHJMQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRp
b24xHzAdBgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxNTAzBgNVBAsTLENsYXNzIDIgTWFu
YWdlZCBQS0kgSW5kaXZpZHVhbCBTdWJzY3JpYmVyIENBMUMwQQYDVQQDEzpTeW1hbnRlYyBDbGFz
cyAyIFNoYXJlZCBJbnRlcm1lZGlhdGUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5AhA3kpxJk/idd3CJ
YfZtK3K7MIHxBgsqhkiG9w0BCRACCzGB4aCB3jCByTELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5
bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMTUwMwYD
VQQLEyxDbGFzcyAyIE1hbmFnZWQgUEtJIEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQTFDMEEGA1UE
AxM6U3ltYW50ZWMgQ2xhc3MgMiBTaGFyZWQgSW50ZXJtZWRpYXRlIENlcnRpZmljYXRlIEF1dGhv
cml0eQIQN5KcSZP4nXdwiWH2bStyuzANBgkqhkiG9w0BAQEFAASCAQAmDqWofgmPnCQe9o1fDnDW
kSwLGrkbIJK8txhv8HU/0tSZpfV1effhs2PPg6zHXI58mMNbwMNjXgcyh0VI27sBBB4EMp3cjpcK
b7mwCJ6Yz4LNwQBdeTweoRWCGsDUYvBr/EZFWt8Y4L4uT9y/g4bsNJRqcTgZfESesie2ywEm2ZQ8
Ci54g1eBLSh9haIgDI2R5To0H3smcJssqBe8Q5qVt7GMvdA1tnxQ4tOgeytuO6mqNrwO6mP3v6Jz
1K47wHfOhSjq1YxOeqaD6U2aMD58hlHztPQ+ircZYzuJhG9pn96C9J0yzpN3RksP/xTDpw2VeEFU
MiRzFx31iQM6j9LLAAAAAAAA

--Apple-Mail=_D0C18CF5-9205-4F9D-B1FC-BA3A800AF70E--