Re: [DNSOP] [Ext] Working Group Last Call for draft-ietf-dnsop-7706bis

[Wes Hardaker <[e-mail]>]

Paul Hoffman <[e-mail]> writes:

Hi Paul,

Thanks for the considerations and the changes made.

> > 3. Though the document has "relaxed" the specification to not require a
> >   loopback address/interface, this is still functionally a no-op since
> >   it still requires only serving data from the localhost.  That's not
> >   really relaxing it much; it just means functionally the same thing
> >   with a slightly wider view of how to implement it.
> 
> Please note that the word "localhost" no longer appears in the
> document.

True, but that's largely the semantics around the loopback.  The phrases
"same host" and "same server" appear instead, which is functionally
nearly the same thing from a logical point of view.

Anyway, I'm not suggesting it change.  So I shouldn't send this mail.

> > 10. For A.1, second paragraph about LocalRoot, can you replace with the
> >    following text (assuming you agree with it):
> > 
> >    The LocalRoot project (<https://localroot.isi.edu/>) is a service
> >    that embodies many of the ideas in this document and is operated in
> >    cooperation with USC/ISI's root server.  It distributes the root
> >    zone by AXFR, but also offers DNS NOTIFY messages when the LocalRoot
> >    system sees that the root zone has changed, providing potentially
> >    faster updates to local root implementations.  It additionally
> >    provides secured AXFR transfers, which helps defeat issues with
> >    unsigned glue records being potentially modified in transit (see
> >    Section 2).
> 
> I'm hesitant to do this because the text you give here is different
> than the text on the web site with respect to the status of the
> server, and with respect to the availability of TSIG.

Huh?  Can you clarify "with respect to the availability of TSIG"?

-- 
Wes Hardaker
USC/ISI