IETF Logo Mail Archive

Re: [DNSOP] Fw: New Version Notification for draft-bellis-dns-recursive-discovery-00

Mark Andrews <marka@isc.org> Wed, 21 October 2009 01:45 UTC

Return-Path: <marka@isc.org>
X-Original-To: dnsop@core3.amsl.com
Delivered-To: dnsop@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CA6493A696C for <dnsop@core3.amsl.com>; Tue, 20 Oct 2009 18:45:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.256
X-Spam-Level:
X-Spam-Status: No, score=-2.256 tagged_above=-999 required=5 tests=[AWL=-0.257, BAYES_00=-2.599, J_CHICKENPOX_54=0.6]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9F3WFlncQB4P for <dnsop@core3.amsl.com>; Tue, 20 Oct 2009 18:45:08 -0700 (PDT)
Received: from farside.isc.org (farside.isc.org [IPv6:2001:4f8:3:bb::5]) by core3.amsl.com (Postfix) with ESMTP id 01ED83A6892 for <dnsop@ietf.org>; Tue, 20 Oct 2009 18:45:07 -0700 (PDT)
Received: from drugs.dv.isc.org (drugs.dv.isc.org [IPv6:2001:470:1f00:820:214:22ff:fed9:fbdc]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "drugs.dv.isc.org", Issuer "ISC CA" (not verified)) by farside.isc.org (Postfix) with ESMTP id 4CC9AE6056; Wed, 21 Oct 2009 01:45:13 +0000 (UTC) (envelope-from marka@isc.org)
Received: from drugs.dv.isc.org (localhost [127.0.0.1]) by drugs.dv.isc.org (8.14.3/8.14.3) with ESMTP id n9L1j8of033780; Wed, 21 Oct 2009 12:45:08 +1100 (EST) (envelope-from marka@drugs.dv.isc.org)
Message-Id: <200910210145.n9L1j8of033780@drugs.dv.isc.org>
To: Joe Abley <jabley@hopcount.ca>
From: Mark Andrews <marka@isc.org>
References: <OFA656600E.F5229B3D-ON80257650.005247BF-80257650.00527644@nominet.org.uk> <82skde36c9.fsf@mid.bfk.de> <DE23E9BF50E437E2D5CA65C8@Ximines.local> <82ljj61gle.fsf@mid.bfk.de> <200910202329.n9KNT56j048843@drugs.dv.isc.org> <1F61DD04-14A6-4349-8650-9CF27D27C3BC@hopcount.ca>
In-reply-to: Your message of "Tue, 20 Oct 2009 19:38:19 EDT." <1F61DD04-14A6-4349-8650-9CF27D27C3BC@hopcount.ca>
Date: Wed, 21 Oct 2009 12:45:08 +1100
Sender: marka@isc.org
Cc: Ray.Bellis@nominet.org.uk, dnsop@ietf.org, Alex Bligh <alex@alex.org.uk>, Florian Weimer <fweimer@bfk.de>
Subject: Re: [DNSOP] Fw: New Version Notification for draft-bellis-dns-recursive-discovery-00
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 21 Oct 2009 01:45:08 -0000

In message <1F61DD04-14A6-4349-8650-9CF27D27C3BC@hopcount.ca>, Joe Abley writes
:
> 
> On 2009-10-20, at 19:29, Mark Andrews wrote:
> 
> >> ARPA will soon be signed, so I don't think this is much to worry
> >> about.  If the powers that be finally agree to make NXDOMAIN/NODATA
> >> synthesis the default in the upcoming minor DNSSEC revision, this  
> >> will
> >> also help to cut down the number of requests.
> >
> > And LOCAL.ARPA would need to be a unsigned delegation.
> 
> Could you explain this? The draft under discussion specifies that  
> LOCAL.ARPA is not to be delegated at all, so your sentence above  
> confuses me.

For LOCAL.ARPA to be accepted you need a break in the DNSSEC trust
chain.  You can only break a trust chain at a delegation.
 
> Joe
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka@isc.org

v2.28.0 | Report a Bug | By Email | System Status