On Mon, Mar 26, 2018 at 12:13 PM, Petr Špaček <[email protected]> wrote: > On 26.3.2018 12:35, Ralph Dolmans wrote:> On 26-03-18 12:04, Michał > Kępień wrote: >>>> What is the expected behaviour given >>>> example.net CNAME kskroll-sentinel-is-ta-<key-tag>.example.com >>>> when you query for example.net when the key-tag does not match >>>> a root TA? etc. >>> >>> This question is still outstanding as of version -08 of the draft. >> >> It is indeed, and it is a question that needs to be answered before it >> is possible to properly implement the sentinel. >> >> For the sake of simplicity I prefer that the *original* QNAME should >> match the special label. > > Meaning of QNAME is (re)defined here: > https://tools.ietf.org/html/draft-ietf-dnsop-terminology-bis-09#page-10 > Let's be explicit and use "QNAME (original)".
Thank you, I've made this, and incorporated a few other edits (thanks to Paul Hoffman for the PR) and posted a new version (-09) W > > -- > Petr Špaček @ CZ.NIC > > _______________________________________________ > DNSOP mailing list > [email protected] > https://www.ietf.org/mailman/listinfo/dnsop -- I don't think the execution is relevant when it was obviously a bad idea in the first place. This is like putting rabid weasels in your pants, and later expressing regret at having chosen those particular rabid weasels and that pair of pants. ---maf _______________________________________________ DNSOP mailing list [email protected] https://www.ietf.org/mailman/listinfo/dnsop
