This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at https://mailman.ripe.net/archives/list/[email protected]/
[dns-wg] DNSSEC Policy Development Process
- Previous message (by thread): [dns-wg] DNSSEC Policy Development Process
- Next message (by thread): [dns-wg] DNSSEC Policy Development Process
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
McTim
dogwallah at gmail.com
Sat Aug 27 08:35:42 CEST 2005
Hi Jim, If I may bring this thread back on track. I don't know why the WG is asked to comment on procedure as well as policy, but here goes: What does "reasonable" mean in the below sentence on: http://www.ripe.net/rs/reverse/dnssec/registry-procedure.html "Is the signature validity period close to expiring and are the Times To Live (TTLs) a reasonable fraction of the signature validity period?" I'm confused about this para on same page: "Web Interface Restrictions We will develop a web interface to make it easy to create domain objects with the appropriate "ds-rdata:" attributes. It will have some operational restrictions It will use the SEP flag to select the keys for which DSRRs are needed. It will use the "ds-rdata:" attribute of the domain object currently available in the RIPE Whois Database to select the appropriate default DNSKEY RR. It will then select a new "ds-rdata:" attribute." How do you use the "currently available object" to create an object if this object doesn't exist until you create it? I am clearly missing smt, but it escapes me at the moment. I support Jim's suggestion in re: generic replacement of "DLV" mention. The rest looks fine to me, -- Cheers, McTim nic-hdl: TMCG
- Previous message (by thread): [dns-wg] DNSSEC Policy Development Process
- Next message (by thread): [dns-wg] DNSSEC Policy Development Process
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
[ dns-wg Archives ]