[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: DNSSECbis-records-05 compression issue



At Sun, 02 Nov 2003 21:59:17 -0500, Ólafur Guðmundsson wrote:
> 
> Currently Sections 3.1.7 and 4.1.1 say Sender MUST NOT compress and
> receiver SHOULD decompress if it receives compress domain name embedded
> in the RDATA of RRSIG and NSEC.
> 
> This is in violation of RFC3597 which outlaws any compression in records
> defined after its publication or with number higher than 42.
> 
> I propose that the text in above sections be changed to say:
> Domain name compression on MUST NOT be performed[RFC3597].
> 
> The reason to make this explicit is it will allow more rapid detection
> of compression attempts, than if recipients silently decompress.

<hat=editor>

Current text was based on the Robustness Principle, but of course this
is the WG's decision to make, not the editors'.

</hat>

<hat=just-another-bozo-on-this-bus>

I happen to believe that applying the Robustness Principle is correct
here.  YMMV.

</hat>

--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>