Re: [DNSOP] CD bit (was Re: Whiskey Tango Foxtrot on key lengths...)

[Andrew Sullivan <[e-mail]>]

On Wed, Apr 02, 2014 at 02:23:50PM +1100, Mark Andrews wrote:

> And I pointed out before RFC 6840 was published that the appendix
> was incomplete in its analysis.

For whatever it's worth, my recollection is that, among other things,
you offered the sort of calm, reasoned, fully-explained analysis that
you and Nick Weaver seem to be competing to offer in this discussion,
with the all-caps lines and everything.  But in any case, since that
was another WG and since that document is published, I'm not sure the
value in debating the history.

There _is_ discussion of some of these issues in 6840, and I think it
is helpful for people to have read it.  It would not surprise me, of
course, if it turned out that 6840 or any other document about the DNS
turned out to have some issues.

> Actually it does as it shows that recursive servers need to validate.

No, it shows that under some use cases the recursive server will
provide better results if it validates, which is subtly different from
what you say there.  "Need to" is too strong.  "Undesirable things
happen if not" might be true.  

Best regards,

A

-- 
Andrew Sullivan
[e-mail]