Re: DS and Opt-in - a proposal

[Roy Arends <Roy.Arends@nominum.com>]

On Fri, 28 Dec 2001, Olaf M. Kolkman wrote:

> On Thu, 27 Dec 2001 22:25:59 -0800 (PST)
> Brian Wellington <bwelling@xbill.org> wrote:
>
> > If the goal is to restrict the use of opt-in, this would do it, but I
> > don't know if that's the goal.
>
> I am for restricting the use of opt-in; if we allow the use of OPT-IN in
> end nodes of the DNS tree I fear that DNSSEC has lost is usefulness for
> protecting the DNS infrastructure.

Restricting the use would be possible, but is, in reality, useless. If I
could not leave a single name (end node) unsigned, I might delegate it
away as an unsigned zone.

Roy



to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.