Patrik,

On Apr 13, 2012, at 2:22 PM, Patrik Fältström wrote:
> But if a validator suddenly see that something is costing them too much, they 
> "just" turn off validation. Done!

Yes, however I don't think this is an outcome we want to encourage.  At this 
point in the deployment of DNSSEC, I'd think we'd want to facilitate validator 
operators dealing with the mistakes others make instead of forcing them eat the 
costs of those mistakes.

> Why do IETF have to say anything at all related to the architecture if this 
> is down to a business cost?

An interesting philosophical question relating to the role of voluntary SDOs, 
but not one I'm interested in pursing right now.  :-)

> http://kommunermeddnssec.se/maps.php

Very interesting (and sad given the amount of red in relation to the amount of 
green). Any idea how many validation failures ISPs are seeing as a result?

Regards,
-drc

_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to