At 8:35 +1100 3/10/09, Mark Andrews wrote:

        This make DNSKEY a better manditory record to publish.

While there's little empirical data on trust anchors to date, my inclination is to whole-heartedly disagree with this statement. So long as the DS record points to a unique DNSKEY record and the DS record involves less typing than a DNSKEY, I'd want to work with a DS record.

--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Edward Lewis
NeuStar                    You can leave a voice message at +1-571-434-5468

Getting everything you want is easy if you don't want much.
_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to