Re: [DNSOP] CDS polling, was Re: [Ext] Re: Clarifying referrals (#35)

[Tony Finch <[e-mail]>]

Paul Wouters <[e-mail]> wrote:
> On Tue, 14 Nov 2017, Jacques Latour wrote:
>
> > Personally, I like a mix of #3 and #1, on a regular basis poll the entire
> > zone for changes, and have a mechanism to listen to child notifications
> > for urgent changes.
>
> Agreed.

Yes.

> > _AND_ remember, the preferred method by far is to submit a DS/DNSKEY
> > record is via the RRR EPP model.  The above is when that RRR EPP model is
> > non functional.
>
> That preference might be political not technical. I personally like the
> DNS based solutions over the EPP based one, because it requires no
> humans or webgui's :)

EPP isn't available to most registrants or operators, since it's a
registrar <-> registry protocol -- remember the motivation for CDS/CSYNC
was lack of any operator <-> registrar update protocol, and lack of any
way to provide registrar credentials to DNS operators.

There are plenty of parent zones which don't have an EPP back end -
examples I care about include the reverse DNS, ac.uk, cam.ac.uk, etc.

Tony.
-- 
f.anthony.n.finch  <[e-mail]>  http://dotat.at/  -  I xn--zr8h punycode
South Utsire, Southeast Forties: Northwesterly backing southerly 5 or 6,
increasing 7 or gale 8 later. Moderate or rough. Showers, rain later. Good,
occasionally poor later.