(Actually, I think you can't have either!)

On Fri, Nov 18, 2016 at 7:14 AM, Ted Lemon <[email protected]> wrote:
> Which do you want?   TLSA, or delegation?  You can't have both.
>
> On Fri, Nov 18, 2016 at 6:52 AM, Mark Andrews <[email protected]> wrote:
>>
>> As I said on the sunset4 mailing list this goes too far.
>>
>> I don't know about you but I want to be able to lookup TLSA records,
>> SRV and other records types for foo.localhost and localhost.
>>
>> And by the way this also requires a insecure delegation in the root
>> zone for DNSSEC to work with validating client.
>>
>> This isn't a good idea.
>>
>> Mark
>> --
>> Mark Andrews, ISC
>> 1 Seymour St., Dundas Valley, NSW 2117, Australia
>> PHONE: +61 2 9871 4742                 INTERNET: [email protected]
>>
>> _______________________________________________
>> DNSOP mailing list
>> [email protected]
>> https://www.ietf.org/mailman/listinfo/dnsop

_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to