Re: Transition from 2535 to opt-in

[Daniel Massey <masseyd@isi.edu>]

Ted Lindgreen wrote:
> 
> [Quoting Paul A Vixie, on Nov 30, 21:33, in "Re: Transition from  ..."]
> > i keep looking at opt-in and DS and asking "how many more years will it take
> > before we get the complexity managed in dnssec and have widely deployed it?"
> 
> Hi,
> 
> There are two issues here on which timely deployment, or
> deployment ever depends, first the conclusions:
> 
> DS: we need it.
> OptIn: if OptIn, why not just forget NXT?
> 
> Let me explain:
> 
> - DS:
>       There is a real issue with the parent-child communication
>       in 2535, which must be resolved, before TLDs can deploy it.

Ted is exactly right.  We need DS to make wide scale deployment  
feasible. The only thing I would add is that the need for DS is not 
just limited to just TLDs.  Based on our test deployment and related 
work we have been doing, DS is essential for anyone that has to deal 
with multiple organizations (i.e. anyone with one or more child zones 
that are run by someone other than you).    

Dan


to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.