[DNSOP] Re: [DNSOP]Re: [Ext] Requesting final comments on draft-ietf-dnsop-rfc8109bis

[Joe Abley <[e-mail]>]

Hi Tim,

Doesn't that text presuppose (a) that the current naming scheme is invariant and (b) the root-servers.net zone will one day be signed?

I suggest phrasing that recognises current reality is probably better than text that speculates about the future, especially when it comes to things that the IETF may not have the final say on. 

Joe

On 17 Jun 2024, at 17:40, Tim Wicinski <[e-mail]> wrote:



Paul is correct on this - we would like a few more comments on the clarification changes to RFC8109-bis. 

Also, Willem offered some suggested text to the last paragraph of 3.3 relating to http://root-servers.net" rel="nofollow">root-servers.net :

  "DNSSEC validation of the priming query is valuable when http://root-servers.net" rel="nofollow">root-servers.net zone will be DNSSEC signed and resolvers revalidate the root server addresses, by following up with direct A and AAAA queries for the names of the root NS RRset"

I would only offer up some slight edit:

DNSSEC validation of the priming query will be valuable when the http://root-servers.net" rel="nofollow">root-servers.net zone is DNSSEC signed.

"will be valuable when" sounds clearer than "is valuable when" but I will leave that as a suggestion.

Some final considerations please

tim

On Thu, Jun 13, 2024 at 3:53 PM Paul Hoffman <[e-mail]> wrote:

One more nudge on this, before the deadline tomorrow.

--Paul Hoffman


On Jun 5, 2024, at 09:28, Paul Hoffman <[e-mail]> wrote:
>
> Tim jumped the gun by about an hour: we just submitted the -05. It incorporates the suggested text from below; you can see the diff at:
>    https://author-tools.ietf.org/iddiff?url2=draft-ietf-dnsop-rfc8109bis-05" rel="noreferrer nofollow" target="_blank">https://author-tools.ietf.org/iddiff?url2=draft-ietf-dnsop-rfc8109bis-05
>
> FWIW, this new text is somewhat based on the findings from NLnetLabs and SIDN on a project supported by ICANN. You can see the report, and an earlier report on a related topic, at:
>   https://www.icann.org/resources/pages/octo-commissioned-documents-2020-11-05-en" rel="noreferrer nofollow" target="_blank">https://www.icann.org/resources/pages/octo-commissioned-documents-2020-11-05-en
>
> Please let us know if you have any issues with the changed text in the new version.   
>
> --Paul Hoffman
>
>
> On Jun 5, 2024, at 08:25, Tim Wicinski <[e-mail]> wrote:
>>
>> All
>>
>> The chairs are requesting some final comments on draft-ietf-dnsop-rfc8109bis. As you might recall, this document has already been through WGLC and had consensus to advance, but our AD reviewed it and raised some additional questions. (Warren Kumari, “AD Review of draft-ietf-dnsop-rfc8109bis,” email to the list on 31 January.)

_______________________________________________
DNSOP mailing list -- [e-mail]
To unsubscribe send an email to [e-mail]