[DNSOP] Re: I-D Action: draft-ietf-dnsop-dnssec-keyrestore-01.txt
"Martin Pels (RIPE NCC)" <mpels@ripe.net> Tue, 11 August 2026 14:22 UTC
Return-Path: <mpels@ripe.net>
X-Original-To: dnsop@mail2.ietf.org
Delivered-To: dnsop@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 0ECFB127DD60F for <dnsop@mail2.ietf.org>; Tue, 11 Aug 2026 07:22:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1786458121; bh=dZR6zvYhHnOq4xZdHnrwNtHgSzBmfVirYUXxGXgKcgg=; h=Date:Subject:To:Cc:References:From:In-Reply-To; b=a+9jMttNErJIY96OZ1JHooutL/R9JWPbZx61zMppb3cC8eVpaQs6un7m4m/7lVVzo H7nKXlT5Ry32vb3B5VAC3Vn5a/D3VfgkPtxCJWNvEC0n5Hk8H6lybEc7MJOi0zVKwK Vf3pyL2ydCMUDN2T5TIF7kQkhwKkHgVgR3hF2s90=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=ripe.net
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8FtZdX9quETz for <dnsop@mail2.ietf.org>; Tue, 11 Aug 2026 07:22:00 -0700 (PDT)
Received: from mail-ej1-x632.google.com (mail-ej1-x632.google.com [IPv6:2a00:1450:4864:20::632]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id AE795127DD60A for <dnsop@ietf.org>; Tue, 11 Aug 2026 07:22:00 -0700 (PDT)
Received: by mail-ej1-x632.google.com with SMTP id a640c23a62f3a-c197eaaab00so468440266b.0 for <dnsop@ietf.org>; Tue, 11 Aug 2026 07:22:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ripe.net; s=google1; t=1786458114; x=1787062914; darn=ietf.org; h=content-transfer-encoding:content-type:in-reply-to:autocrypt:from :content-language:references:cc:to:subject:user-agent:mime-version :date:message-id:from:to:cc:subject:date:message-id:reply-to :content-type; bh=h1qyH7xM7nSmz46NtWBzieFozf6QOFxWoNZcQXvetFM=; b=KMzYpL9WxUXPBuliVmaZGRYi32i2tfwLyiKXNP+KVE6vf8kxfgqNeU0qXFXddwbvBa r0s93/bwywXBfbP1sxXU3X111sJscozGt/uN7gTfP6sLplCEpatXaCIAhNLMR+KiS+CS poAkJGxiXcJ5lQwnwXd0slkLhkGSlPBIG6mQVJ+pvPJUm3G71VQW2UmBs9pvWbnYHzgO jTkoX7kpVlKGawjAHLPavYjHmGX4Ic8+55kJ8nk1/GUQoQqBm3YKHXRrwvLFSh2GVR1E 6xNDReBIlh6iMhFxU1X0jdmO/V5R4iT6EY2Kx61ZbyKWQDySPTuD5sIzM6da1D4lP1i/ PB3w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786458114; x=1787062914; h=content-transfer-encoding:content-type:in-reply-to:autocrypt:from :content-language:references:cc:to:subject:user-agent:mime-version :date:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=h1qyH7xM7nSmz46NtWBzieFozf6QOFxWoNZcQXvetFM=; b=WJ8ExQookM9UIe3eooTzTzQnBXQOEBQVdkaU4nVdD3qocAd5LcHZBCeW4uMGGudBeC w2tfDM+WcRzfxPCvNS4xjiVDnMZikWDZWe9EsZfOuVlS39pHSBx9AOG0K/T6EqhTCGJv pfk3PzNm5nDZsgSOpiJLvcwtIfEj5L4caf/LBlbn0KQNXCCYvSelhTABbOa+7riM7h3C 1qD9Q5Z+ThUuwM5actuHmZB9CGhc4NjJuq5Ki/JSR7a9uTNyuoYcEIWFW4dvOfvApA8T 1Sr2qk5hW06Sgp4YOqZZS/9vVxiq4P2r0tFegRE21BHiQnO8F50RtZ66lMPGSXLdj7gl ImeA==
X-Forwarded-Encrypted: i=1; AHgh+Rq2I/kJiIltK5SWcDgwqWVJGEaF0XMWPBLQJjUSb/GrXkrFxzVdLeYExBCWAgThYABnMMiRVg==@ietf.org
X-Gm-Message-State: AOJu0YwbTT7CcINXXr5S8PdSiT0XETMiR3oLX0Iq8XPsGd014g+O9JRl 7PPFxXjY5olUPbd7fKjKjbAJR+xZIO9exVAQ1et05AbvoP+goT+DfIsV0ZoC3ZlGtAY=
X-Gm-Gg: AR+sD10iwan2k5qMDNFCU3PAZruYq6JUpQ/bBfbI7qbQdiB9esiVvWLLhgEeLf9Aeq0 ZGB7Cx2gJi4X74VWo2Ji8qN5ItxJQ9mquZ255SvVMAQyrnuGPtgm13Ho4ba1E9S1PVta94WHAjP Q0kPmg1GT0iQQune6F7cb4+zq1oSr+6X5GbmefPphVLP3CH7lEPNvfSZLaK1ufwVsFDA0x65aSR kqzAHWABV/B+lMtmT/Dd9wUnH0/r5OwJ5idRiq3O6XNUAEWCAdwdfXal1fmQOxgw9i9kFumxR/P gJ255LMitbCnMGO6F8kst+PIXB/F8GrZgE+BFvk8xSLdSrtKmnR3+nlUB8ijWMszqOscvOOVTta RQynJolp/hMBJu3C5Rys3afTF59Dtwzr8DkKUMOhQ4/izxWX6i9oqHLbAogfyI9qeaQxsRe2fWE TaxfIrMKFUFySqRcZWk2g1Q2mlazFyJBoDr1SmgYz3TyRHz0Ryim93KZ2HVtTo2avYsReC8d/PU boGA4tm2y4+N+sOPtX1TypG
X-Received: by 2002:a17:907:a88b:b0:c15:d6c8:2816 with SMTP id a640c23a62f3a-c20e621dc78mr193153866b.27.1786458114142; Tue, 11 Aug 2026 07:21:54 -0700 (PDT)
Received: from [192.168.2.20] (81-205-54-18.fixed.kpn.net. [81.205.54.18]) by smtp.gmail.com with ESMTPSA id a640c23a62f3a-c20e435d79asm62260766b.49.2026.08.11.07.21.53 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 11 Aug 2026 07:21:53 -0700 (PDT)
Message-ID: <b979c014-830c-44eb-8fd5-d0a0d01caeb5@ripe.net>
Date: Tue, 11 Aug 2026 16:21:53 +0200
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: Peter Thomassen <peter@desec.io>, dnsop@ietf.org
References: <177868390823.1113902.5746956736087473942@dt-datatracker-54557f87b8-lnrkh> <d0f4f249-fccc-47d2-9e22-f36bfd1dafec@ripe.net> <1969f6a7-739f-4d69-8b34-307dd37d65cf@ripe.net> <e28d7e10-2e03-4f8f-8a6b-7a7fb9f0da7b@desec.io> <c6c18b6e-1c8a-4f4c-90d4-6cbc53365bfe@ripe.net> <cc3bca54-f3d2-4129-baf0-b16202ab0ae2@desec.io>
Content-Language: en-US
From: "Martin Pels (RIPE NCC)" <mpels@ripe.net>
Autocrypt: addr=mpels@ripe.net; keydata= xsFNBF6pT/ABEAC+FVkHOzFHubxx/e6WOkJ6bCi/QAM1keINFGeN8M/DpRVdoA1Y3zBX5RTW dBXSMQPCIexR0IiYmEiwQh+6qoRIw9eOKxrmBnlM3dzcahG0uKuROoVf/JSIj7lkKFHC4T0f gog1GUYxhEMtMlAL3oiL6+NS7kCgOuupX9+tWJwISOMc4OorjIhmEx3tqEJt8RwBCD15Gtot x2z+YsnIHaJB87SQmI5kl+ofDAm6wZfYAT4hEkpKSuDUOAPq5PJymelnOdZ9L1mRcT+J8Y8f Yq+H64FXlfRDkA8Pg9ZCRy7Xm6bsywSl9ZSXopeoN+SMzB3QIXXyCTsqWtSf6RS/v1mOfQYY 45VuoBKB5zNOwwNH2LqPW5mTWuqnly1z70mHhRztN4FB/7VCxMp+x12SosQ2wACZjIVg3zhQ Dfg/vxZusq1R9beSRz2JRN2kR+wEnFjrZVYbjErts6JVKsGZzjF1ChZrMKVZ7dJt2rhR0Qvg h0+rgR8Hr3QLwm8QmbjLnkVFutSIdwcm81YCfI709mpVemqQWhVI0Ak0CzXnuMQ8pCnt/XPU 4z4CdxbZFpzny0VtIqidOEmL2kLe5b7A4XYxhK3XTX+AWcdiR47JPbBVSM43Tvear3uJJ65r /g75zl7eKN4U87mlnglDUuIRQeHqjlO6cgs4td4xf2RIgvpQkwARAQABzSdNYXJ0aW4gUGVs cyAoUklQRSBOQ0MpIDxtcGVsc0ByaXBlLm5ldD7CwY4EEwEIADgWIQT00zg2p+oRbgj1QPlM NzgNOPC8lwUCXqlP8AIbAwULCQgHAgYVCgkICwIEFgIDAQIeAQIXgAAKCRBMNzgNOPC8l31k D/kBzvdhIuebQ5C5hoMyXnOIvy/SS8XdR+63WSKvx6Ck8Oly7uU7zHUl4anp0nt0emg3Q5fr uzTSf7T4biNK5KNqye3Zf+ahSgIjHXRLhENx3r49BQ3x3nEUSLVjWdh86OZ5sHkAM+Bmrhwg AWQHmzGJUk33O7XAZdrpII73KdJ0N591ZukpVK3E1I9MIvMGASnlnvGbpr0e2qDsiN4lw0Gf xi+YQWKtrAOvWXa3j5b8hGlc+yj6fbQQ/PMv2aJYssx0+pERJFIq+c2vItkeZZDesXYbFd5p HmPsn8rjVokPVijDaJ1AwZZsOqgMSwCNtEH4nwENSEb1/eWO29gbUXXuxCvCXAKsnOfy1A96 iQPXUrR/k587T897PKAx/BJCqDh895LgyHXC3lYjZajzYa1njFk5huBOPPgKqZvu7oPda/M9 gNHoVbb0NfhaRgAGoJuXhUA0+U52Z1uA8obQ0dSlXWgbo0nV+Y1jv2ccXv2buCRs9gsUbcQ7 SC2ouYyBwaoPKEZ8mSIcdXeBElnmToz4PDUInT1fSXsqo4ge9TrLPqACLRh/VnJzgpbjvoBr 1JBBL50tyRGtBQB4yWkC6u6QuzVEMm0mn77Elfd7hG2qvdTaDz3YKmcAjVqo3xeahv4MC+sF Z/yEFLZUtRfu9okkY++uY7rhbPl2BUZdtMvsls7BTQReqU/wARAAyKbpITvB7W9HbmXV30yn OlQoFaovYYObsFSsHbr3MqgmTDUcIf3CN6mwRt1uJ/tVuALVBX8KGd24L4HAbKN+5IDf05wu Owqy4aLE5dIik6OIgSdiKfCK4RLEdTUa4lluAe+nR1Xnhj6VcvBDvaJjRZ/U5kWi6vh+MvUh JlRygFJ849+ga1E/WgJJemgrId6Sm5GWGAHhDujGC+ZP9FdMpjkGl2MMwW9aJA/RoNRenKSz 8R9stCUoEcp+VhRCr8S5Ar7cUcJFT6uIjaV3YEEdRq+eVmpQmDk89SuXusbqsaeu74gs8uW8 p2G7hgy001MOkZffumLN/yO63NCV7AUa+rCciMmi7RoPfdy+EQj/Seg2NRGXnCDU5jUOWC3r KObkH5q0lvu3W/Pp/gJmcD6PeBjm3Vn6RSpx2CICOMdwqd11OOznOjrXYc2jDd4PVyA6rLtB fve/80chn7/20+dUrTBTui02pTxY00mOLCYPRpA+NH0lfvCH9B/GTr1Zt0Ak/gT/+pBlQw4f LrG0x5j1NhlSIYL14KlxJGWboGfB2ipI7t43DHIJ15CszTNRTV9KE97TBFHeogIWI1uIe/da Y5mRTPFpf4NAiYb+P58gSlbizyQkzXUwu+vJZuBrRBBhG94zymdnj3CKjqw4Sq9k9ZX3BdTj TG1pJmXOY3i3QVcAEQEAAcLBdgQYAQgAIBYhBPTTODan6hFuCPVA+Uw3OA048LyXBQJeqU/w AhsMAAoJEEw3OA048LyXLIUP/3FW9hDzFIXvm/IEq8tCWYVYKTD1jZ/oduWrDcnqgrP079TK 7BHhFg6bqu6r3kgQSY1hPCq3ri5L46eQLaMwkukcxkSe6VJSCVWqycdRN2hgZnnrms7Ow518 UNXuLiWoQaRgIE08/cnKXcmJZEnLxTZWAu/AKjSTdqiztdUXlyX1PGqsIWlcaqvIGXNufy1A WNPBz8c4vBSlCEUdlqSBix0vTBGNfsHWBDK622WzSGxB5jNvsHN3rFYDfQzw2cau/SRb64CH kgzamFY2cnJxxXFEx26IDiKLJQBTr/zzls5Up09HnzQf8f9rp47lT+98deGKg8dKK2YzN6Sn qwse7+R/eaeVE37nFhq6qgFfaOpRPz/BjfUib//4EaaDcFzN7tJT1uQ4NnSl2coFtSPZ0uok izHGwcA84tneBjLPTnIYpCZdT5nbpLlVFdmAbm6BgBut1iQ5ldHeTUvXzkKBa3KKV/j1mrIz QAPPq/QgRmb/1h3iGbdri0AMeTn7qAf4WTr71JuDsvziT5ZqFu5N8k48IftR7NXnA01QXy3h Yc4saYN03xUxSDoLXiVwqus8cj2pKtWTLNcHOxspUHZLQJHFaydybBzpLYNJQzdvk2zhOoEL ivK0iSDioTL8fKKkHm1kU/29c27MEWd8M3PXCp5brbQ+XFhDfFsqM52se/Ww
In-Reply-To: <cc3bca54-f3d2-4129-baf0-b16202ab0ae2@desec.io>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Message-ID-Hash: FIWP43JWJRF3ZWM3TIFOKIQCSPCXVV4N
X-Message-ID-Hash: FIWP43JWJRF3ZWM3TIFOKIQCSPCXVV4N
X-MailFrom: mpels@ripe.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dnsop.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Florian Obser <florian+ietf@narrans.de>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [DNSOP] Re: I-D Action: draft-ietf-dnsop-dnssec-keyrestore-01.txt
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/Xhoo3RvuvHRrmPDa9GNECYTtsdc>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Owner: <mailto:dnsop-owner@ietf.org>
List-Post: <mailto:dnsop@ietf.org>
List-Subscribe: <mailto:dnsop-join@ietf.org>
List-Unsubscribe: <mailto:dnsop-leave@ietf.org>
Hi Peter, On 10/08/2026 09:50, Peter Thomassen wrote: > I therefore think it's better to say "relying on SOA serial comparisons > for triggering zone transfers", or something like that. Thank you. We will fix this in the next iteration. Kind regards, Martin
- [DNSOP] I-D Action: draft-ietf-dnsop-dnssec-keyre… internet-drafts
- [DNSOP] Re: I-D Action: draft-ietf-dnsop-dnssec-k… Martin Pels
- [DNSOP] Re: I-D Action: draft-ietf-dnsop-dnssec-k… Martin Pels
- [DNSOP] Re: I-D Action: draft-ietf-dnsop-dnssec-k… Peter Thomassen
- [DNSOP] Re: I-D Action: draft-ietf-dnsop-dnssec-k… Martin Pels
- [DNSOP] Re: I-D Action: draft-ietf-dnsop-dnssec-k… Peter Thomassen
- [DNSOP] Re: I-D Action: draft-ietf-dnsop-dnssec-k… Martin Pels (RIPE NCC)