Hi,
> I think the publication approach is somewhat simpler, at least for the child
> zone.
> It's very simple for signing software (including off-line signers) to
> generate the "CDS" RRset.
> Since there are many more child zones than parent zones, this seems
> significant.
Not sure i can agree with that. The UPDATE the child has to send can be
performed completely with existing tools ('nsupdate' from BIND as one example).
I don't think it's more or less complex than including a record inside of the
zone. This however is a decision we as those who are writing the drafts should
not decide but leave it up to the end-user.
Regards,
Wolfgang
_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop
