Re: DNSEXT WGLC: DNSSEC Opt-in

[Rob Austein <sra+namedroppers@hactrn.net>]

At Tue, 4 Feb 2003 15:30:19 -0500, Mark Kosters wrote:
> 
> On Tue, Feb 04, 2003 at 01:17:38PM -0500, Ólafur Gudmundsson/DNSEXT co-chair wrote:
>
> > Q: Does this document satisfy people as being implement able and testable
> > specification ?
> 
> WRT opt-in, we tested with two authoritative servers (ISC and VeriSign) and
> one opt-in aware recursive server (ISC). A mixture of delegations were
> tested (fully secure, opt-in, and insecure) and all worked. So, it looks
> to me like the specifications are clear.

Not to be difficult, but the resolver side of opt-in is the hard part.
Is there a second iterative resolver implementation, and has it been
through any interoperability testing?

Not faulting anybody, just digging for whatever data we have.

--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>