Re: [DNSOP] new dnsop related draft: RFC5011 security considerations

[Bob Harold <[e-mail]>]

On Mon, Aug 1, 2016 at 6:54 PM, Wes Hardaker <[e-mail]> wrote:

> "Wessels, Duane" <[e-mail]> writes:
>
> >>    RRSIG Signature Validity  10 days
> >
> > Here I think you probably want to say DNSKEY RRSIG signature validity,
> > because thats the only RRset whose validity period matters, right?
>
> Very good point.  Changed for our next publication.
>
> >>  Zone Maintainer  The owner of a zone intending to publish a new Key-
> >>     Signing-Keys (KSKs) that will become a trust anchor by validators
> >>     following the RFC5011  process.
> >
> > Could I convince you to use another term?  Maybe just Zone Owner?  I
> > worry that when people read Zone Maintainer they would subconsciously
> > put "Root" in front of it and your abstract notes that this isn't
> > really a concern for (current) root zone plans.
>
> Sure.  Though there is always an issue with coming up with terms to
> describe who controls various bits of a zone these days.  It's not the
> content owner, as that's often separated from the security dude that
> signs the content (as you well know).  We need a suitable term for that
> role generally.  I particularly like a suggestion by thesaurus.com, and
> sadly it's actually the better of many of the choices: "zone right-hand
> person".
>
> Any other suggestions?
> --
> Wes Hardaker
> Parsons
>
>
> "zone signer" for that role?

Some typos:

 1.  Introduction
"indented"  should be "intended"

5.  Denial of Service Attack Considerations
"validataor" should be "validator"

-- 
Bob Harold