In message <a06240800c7b36d1b8...@[10.31.200.187]>, Edward Lewis writes: > At 12:34 +1100 3/3/10, Mark Andrews wrote: > >I recommend something that is UPDATE + TSIG like. The child's key manager > >component can send the updates. > > With the concern about keeping key management separate from the > Internet, opening up the master server for across-the-'net dynamic > update to insert a DS record seems a bit counter-productive. This > certainly wouldn't fly for "large" TLDs, it might be applicable for > informal environments.
Hence "like". Today, with UPDATE we support forwarding of the request to another box for processing. There is no reason that this could not happen for this process. It would be nice if the UPDATE code could handle these requests but not required. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: [email protected] _______________________________________________ DNSOP mailing list [email protected] https://www.ietf.org/mailman/listinfo/dnsop
