[DNSOP] nsec3-parameters opinions gathered

[Wes Hardaker <[e-mail]>]

Folks,

I was waiting for the last discussion to die down (and then, um, for me
to finally examine the opinions).  The results are in from the people
that weighed in:

  | who              | wants | accepts                    |
  |------------------+-------+----------------------------|
  | Peter van Dijk   |     0 | anything low               |
  | Matthijs Mekking |   150 | 150 -- vendors implemented |
  | Miek Gieben      |   100 | or lower                   |
  | Paul Vixie       |     0 |                            |
  | Vladimír Čunát   |   any |                            |
  | Viktor Dukhovni  |     0 | 100 or 150                 |

I think the consensus is "everyone wants low", but most are willing to
accept any value up to 150.

The most important sticking point is there are 4 implementations (thank
you for the links Matthijs) that have implemented 150.  Since DNSOP
strives for implementations of specs, I think this is the number we
should publish *unless the vendors speak up and say they'll drive lower*.

150 is higher than almost everyone would ideally like, and zero would
certainly be a nice target.  But without implementation...

-- 
Wes Hardaker
USC/ISI