On 29 Feb 2016, at 6:12, Shane Kerr wrote:
Can't a couple sentences address this concern?
"If the root zone is not DNSSEC signed with NSEC records then the
Cheese Shop is closed and this document does not apply. Resolvers MUST
continue to work in such an environment."
Shane's proposal would be a good addition and should alleviate Ed's
concern. That is, the proposal is "in this zone at this time, X makes Y
possible". Adding "If you implement this proposal, you have to check
whether X still is valid and, if not, go back to what you were doing
before" is a good idea.
--Paul Hoffman
_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop
