Re: [dnsext] Trust Anchors

[Andrew Sullivan <ajs@shinkuro.com>]

As before, no hat.

On Tue, Oct 27, 2009 at 12:07:37PM -0400, Thierry Moreau wrote:
> If you establish a policy for one concern, should you care about other  
> impact of the policy?

Only if it has such an effect.  I am arguing that there could be no
such effect here, if the policy is designed correctly, because the
point of the policy is to avoid downgrades where there is an insecure
link in the chain.  As there is no such possible downgrade in this
case, we don't have to worry about it.

If what you're saying is, "The language ought to be tailored to avoid
this sort of problem," I agree.  But if you're saying that this has
implications for the root, I strongly disagree.

A

-- 
Andrew Sullivan
ajs@shinkuro.com
Shinkuro, Inc.