Re: another's view on zone enum & on-line signing

[David Blacka <davidb@verisignlabs.com>]

On Sep 23, 2004, at 11:56 PM, Paul Vixie wrote:

> > > word on the street is, online signing isn't allowed in the 
> > > dnssec-bis spec.
> >
> > What about a signed zone that is dynamically updated - doesn't that
> > physically require on-line signing?
>
> i meant online signing of negative responses, without precomputed 
> NSECs.

So the problem you were referring to wasn't online signing, it was NSEC 
synthesis at (otherwise) non-existent names, right?

--
David Blacka    <davidb@verisignlabs.com>
Sr. Engineer    Verisign Applied Research


--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>