Ralf Weber wrote on 2020-04-14 08:57:
Moin!
On 14 Apr 2020, at 17:43, Paul Vixie wrote:
DS should never have been placed at the delegation point, and has led
to a decade or longer of bugs and corner cases and complexity. it
ought to have been a nephew domain of the delegation point, but, in
the parent:
so instead of example.com DS, it should have been example._dnssec.com DS.
Just to clarify if I understand that correct. The DS for example.net
would be example._dnssec.net DS. Correct? So would you propose to do
example._ns2.net NS2 to distinguish parent and child NS2 records?
i didn't understand the semantics of having more than one NS2, so i
don't know.
--
P Vixie
_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop
