Re: [DNSOP] FW: New Version Notification for draft-mglt-dnsop-dnssec-validator-requirements-05.txt

Bob Harold <rharolde@umich.edu> Wed, 12 July 2017 13:38 UTC

MIME-Version: 1.0
In-Reply-To: <2DD56D786E600F45AC6BDE7DA4E8A8C118C87C98@eusaamb107.ericsson.se>
References: <149864318298.18209.9110331798587720209.idtracker@ietfa.amsl.com> <2DD56D786E600F45AC6BDE7DA4E8A8C118C87C98@eusaamb107.ericsson.se>
From: Bob Harold <rharolde@umich.edu>
Date: Wed, 12 Jul 2017 09:38:05 -0400
Message-ID: <CA+nkc8BKU9G8KZfbsYfB+1tzYT+oF9gvwSmFE6pL7CzLwcCtgA@mail.gmail.com>
To: Daniel Migault <daniel.migault@ericsson.com>
Cc: dnsop <dnsop@ietf.org>
Content-Type: multipart/alternative; boundary="94eb2c19dbc20ad15605541eedba"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/MwcQcXoh19g3Pe_qtqThPrzOgJs>
Subject: Re: [DNSOP] FW: New Version Notification for draft-mglt-dnsop-dnssec-validator-requirements-05.txt
Precedence: list

On Wed, Jun 28, 2017 at 6:13 AM, Daniel Migault <daniel.migault@ericsson.com
> wrote:

> Hi,
>
> Please find a new version for the DNSSEC validators requirements. Our
> understanding is that the current version has considered all received
> comments.
>
> We appreciate your comments and feed backs.
>
> Yours,
> Daniel
>
> -----Original Message-----
> From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org]
> Sent: Wednesday, June 28, 2017 11:46 AM
> To: Edward Lewis <edward.lewis@icann.org>; Daniel Migault <
> daniel.migault@ericsson.com>; Dan York <york@isoc.org>; york@isoc.org <
> york@isoc.org>
> Subject: New Version Notification for draft-mglt-dnsop-dnssec-valida
> tor-requirements-05.txt
>
>
> A new version of I-D, draft-mglt-dnsop-dnssec-valida
> tor-requirements-05.txt
> has been successfully submitted by Daniel Migault and posted to the IETF
> repository.
>
> Name:           draft-mglt-dnsop-dnssec-validator-requirements
> Revision:       05
> Title:          DNSSEC Validators Requirements
> Document date:  2017-06-27
> Group:          Individual Submission
> Pages:          13
> URL:            https://www.ietf.org/internet-
> drafts/draft-mglt-dnsop-dnssec-validator-requirements-05.txt
> Status:         https://datatracker.ietf.org/
> doc/draft-mglt-dnsop-dnssec-validator-requirements/
> Htmlized:       https://tools.ietf.org/html/d
> raft-mglt-dnsop-dnssec-validator-requirements-05
> Htmlized:       https://datatracker.ietf.org/
> doc/html/draft-mglt-dnsop-dnssec-validator-requirements-05
> Diff:           https://www.ietf.org/rfcdiff?
> url2=draft-mglt-dnsop-dnssec-validator-requirements-05
>
> Abstract:
>    DNSSEC provides data integrity and source authentication to a basic
>    DNS RRset.  Given a RRset, a public key and a signature, a DNSSEC
>    validator checks the signature, time constraints, and other, local,
>    policies.  In case of mismatch the RRSet is considered illegitimate
>    and is rejected.
>
>    Accuracy in DNSSEC validation, that is, avoiding false positives and
>    catching true negatives, requires that both the signing process and
>    validation process adhere to the protocol, which begins with external
>    configuration parameters.  This document describes requirements for a
>    validator to be able to perform accurate validation.
>
>
5. Trust Anchor Datastore
"A company "Example" may for address all its devices"
probably should be:
"A company "Example" may address all its devices"

-- 
Bob Harold

[DNSOP] FW: New Version Notification for draft-mg… Daniel Migault
Re: [DNSOP] FW: New Version Notification for draf… Bob Harold