Re: [DNSOP] Expiration impending: <draft-jabley-dnssec-trust-anchor-11.txt>

["Joe Abley" <[e-mail]>]

On 5 Oct 2015, at 17:16, Paul Hoffman wrote:

> On 5 Oct 2015, at 17:00, Joe Abley wrote:
>
>> OK, I agree they are templates.
>>
>> I disagree that it makes sense to publish URLs that refer to just the 
>> key label used by the currently active KSK. That would make this 
>> document inaccurate as soon as a KSK roll occurred, despite the fact 
>> that it aims to document the way that the current and future 
>> successor trust anchors are published.
>
> It sounds like you don't want to limit the document to what many 
> people have asked, namely to document ICANN's current methods for 
> publishing the KSK. That's a fine desire, but it is quite sloppy to 
> conflate the two.

I think we've passed the point of diminishing returns on this point (if 
not this thread).

My perspective remains that the document does exactly what you 
characterise it as not doing. Perhaps it's time to sit back and wait for 
others here to express an opinion.

>> The "key-label" token is intended to be taken from the 
>> root-anchors.xml file, which is cited with a stable URL.
>
> The term "key-label" does not appear in Section 2.1, so there is not 
> even a description of how to fill in the template.

That sounds like a change we could make that would aid clarity. Thanks 
-- we'll review and see what we can do.


Joe