Moin!

On 14 Apr 2020, at 17:43, Paul Vixie wrote:
DS should never have been placed at the delegation point, and has led to a decade or longer of bugs and corner cases and complexity. it ought to have been a nephew domain of the delegation point, but, in the parent:

so instead of example.com DS, it should have been example._dnssec.com DS.
Just to clarify if I understand that correct. The DS for example.net would be example._dnssec.net DS. Correct? So would you propose to do example._ns2.net NS2 to distinguish parent and child NS2 records?

So long
-Ralf
—--
Ralf Weber

_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to