Re: [DNSOP] kskroll-sentinel and unclear results

["Paul Hoffman" <[e-mail]>]

On 29 May 2018, at 16:46, Wessels, Duane wrote:

> I took a look at your pull request.  I like the direction this is 
> heading, and
> I like the change from "invalid" to "bogus."

Great, thanks.

> It leaves me with a couple
> of questions though.
>
> Your new second paragraph of section 3 says "this entire section is 
> about
> DNS resolution systems" and "we can classify DNS resolution systems 
> into
> five distinct behavior types" but the subsequent descriptions of Vnew,
> Vold, etc still talk about a single resolver?

Now fixed.

>
> Similarly, in Appendix A should the text be changed so that, for 
> example,
> instead of saying "Bob is not using a validating resolver" it says 
> "None
> of the resolvers in Bob's DNS resolution system are validating"?
>
> "All of Charlie's resolvers are validating..."?
>
> "All of Dave's resolvers implement the sentinel method..."?

I started to make this change, but it made some of the sentences quite 
awkward. Instead, I added a sentence at the top of the appendix that 
says "The examples here all assume that each person has just one 
resolver, or a system of resolvers that have the same properties."

> Nitpick:
>
>   "If a client directs these three queries to a DNS	
>   resolution system where the resolvers have different propertied,
>   the results cannot be determined."
>
> Should be "properties" and I'd say "cannot be reliably determined."

Now fixed.

--Paul Hoffman