Wes Hardaker <[email protected]> writes:
>> Again:
>>
>> addWaitClockTime = lastSigExpirationTime + activeRefresh +
>> addHoldDownTime + activeRefresh + safetyMargin (which now seems to be
>> labeled retrySafetyMargin).
>
> Which is exactly what's in ... *crap* ... I missed a term in an
> equation.
>
> But 6.2.1.1 *will* state:
Whoops, I got the section number wrong for the equation you wanted.
It's 6.2.2 and it *will* state:
addWallClockTime = lastSigExpirationTime
+ addHoldDownTime
+ 2 * MAX(1 hour,
MIN(sigExpirationTime / 2,
MAX(TTL of K_old DNSKEY RRSet) / 2,
15 days)
)
+ retrySafetyMargin
Which is exactly what you wanted.
--
Wes Hardaker
USC/ISI
_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop