[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [dnsext] Trust Anchors

To: Thierry Moreau <thierry.moreau@connotech.com>
Subject: Re: [dnsext] Trust Anchors
From: Andrew Sullivan <ajs@shinkuro.com>
Date: Tue, 27 Oct 2009 11:56:01 -0400
Cc: namedroppers@ops.ietf.org
In-reply-to: <4AE716EF.8050302@connotech.com>
References: <B23BFD68-D7E4-47AA-932E-87FED98D4892@nominum.com> <20091026145151.GD55437@shinkuro.com> <p06240811c70b7d2ce4ac@[10.20.30.158]> <4AE6B245.1060603@nlnetlabs.nl> <20091027142031.GP55437@shinkuro.com> <4AE716EF.8050302@connotech.com>
User-agent: Mutt/1.5.18 (2008-05-17)

On Tue, Oct 27, 2009 at 11:51:11AM -0400, Thierry Moreau wrote:
>
> The DNS root signature deployment plan includes a gradual roll-out phase  
> during which the policy should be (must be?) to prefer insecure over  
> bogus in a case where the protocol allows either.

Surely that's not exactly relevant to the case under discussion,
because there can't possibly be a downgrade for the root due to some
higher-level intermediate insecured zone.  Right?

A

-- 
Andrew Sullivan
ajs@shinkuro.com
Shinkuro, Inc.

Follow-Ups:
- Re: [dnsext] Trust Anchors
  - From: Thierry Moreau <thierry.moreau@connotech.com>

References:
- [dnsext] Trust Anchors
  - From: Bob Halley <Bob.Halley@nominum.com>
- Re: [dnsext] Trust Anchors
  - From: Andrew Sullivan <ajs@shinkuro.com>
- Re: [dnsext] Trust Anchors
  - From: Paul Hoffman <paul.hoffman@vpnc.org>
- Re: [dnsext] Trust Anchors
  - From: "W.C.A. Wijngaards" <wouter@NLnetLabs.nl>
- Re: [dnsext] Trust Anchors
  - From: Andrew Sullivan <ajs@shinkuro.com>
- Re: [dnsext] Trust Anchors
  - From: Thierry Moreau <thierry.moreau@connotech.com>

Prev by Date: Re: [dnsext] Trust Anchors
Next by Date: Re: [dnsext] Trust Anchors
Previous by thread: Re: [dnsext] Trust Anchors
Next by thread: Re: [dnsext] Trust Anchors
Index(es):
- Date
- Thread