[dnsop] draft-krishnaswamy-dnsop-dnssec-split-view-03

[Suresh Krishnaswamy <[e-mail]>]

The latest version of the DNSSEC split-views draft addresses a whole  
buch of comments that were either sent to the list or directly  
communicated to me.

Major changes in the the draft are that it now actually makes  
recommendations about which scenario(s) a particular option is best  
suited to; an improved network architecture figure (with thanks to  
all those who contributed); reorganization of text with new sections  
added and portions moved to the appendix. I've also added some text  
to suggest that this document is more a "DNSSEC" split-views  
recommendation rather than a "DNS" split-views recommendation.

I personally think that there is enough agreement within the working  
group that this topic, in general, is important. Does the group also  
feel that we have enough of a start in draft-krishnaswamy-dnsop- 
dnssec-split-view-03 to form the basis of a Working Group document?

Suresh

>
> A New Internet-Draft is available from the on-line Internet-Drafts
> directories.
>
>
> 	Title		: Split-View DNSSEC Operational Practices
> 	Author(s)	: S. Krishnaswamy
> 	Filename	: draft-krishnaswamy-dnsop-dnssec-split-view-03.txt
> 	Pages		: 23
> 	Date		: 2006-8-23
> 	
> The security extensions to the Domain Name System (DNSSEC) allow for
>    integrity protection, whereby it is possible to make a  
> determination
>    of the verity of data returned from the Domain Name System in
>    response to a query.  Current operation of the Domain Name System
>    also allows for the creation of multiple views of data, where the
>    answer returned in response to a query is dependent on the  
> origin of
>    the query.  Data integrity and the ability to return possibly
>    conflicting values as in split-views may be construed to be  
> mutually
>    conflicting goals; but this apparent dichotomy is resolvable in
>    practice through careful configuration.  This document provides
>    recommendations for configuring a manageable split-view DNSSEC
>    environment in a representative enterprise network.
>
> A URL for this Internet-Draft is:
> http://www.ietf.org/internet-drafts/draft-krishnaswamy-dnsop-dnssec- 
> split-view-03.txt
>

.
dnsop resources:_____________________________________________________
web user interface: http://darkwing.uoregon.edu/~llynch/dnsop.html
mhonarc archive: http://darkwing.uoregon.edu/~llynch/dnsop/index.html