On Jun 24, 2010, at 11:59 AM, George Barwood wrote:
> It could also note that validators SHOULD NOT check the RRSIG for a DNSKEY
> RRset
> where all the keys are validated by DS records.
This document (4641-bis) is supposed to give operational guidance only.
Implementation guidance for validators should (IMHO) go to another document.
--Olaf
________________________________________________________
Olaf M. Kolkman NLnet Labs
Science Park 140,
http://www.nlnetlabs.nl/ 1098 XG Amsterdam
_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop
