Petr Špaček <petr.spa...@nic.cz> wrote:
>
> One problem I can see is that these additional RRSIGs effectively
> prevent modification of data but not removal of glue (or NS in out-out
> intervals) ...
I was kind of assuming that the NSEC chain would include the glue -
obviously delegations and glue in opt-out intervals are not protected at
all.
Tony.
--
f.anthony.n.finch <d...@dotat.at> http://dotat.at/
Forties, Cromarty, Forth, Tyne, Dogger: South or southwest 4 or 5,
occasionally 6 at first in Cromarty and Forth, then becoming variable 3 at
times. Slight throughout in Tyne and Dogger, but elsewhere slight or moderate.
Fair then rain at times. Good, occasionally moderate.
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop
