Moin!
On 14 Apr 2020, at 17:59, Paul Vixie wrote:
Ralf Weber wrote on 2020-04-14 08:57:
Just to clarify if I understand that correct. The DS for example.net
would be example._dnssec.net DS. Correct? So would you propose to do
example._ns2.net NS2 to distinguish parent and child NS2 records?
i didn't understand the semantics of having more than one NS2, so i
don't know.
Mainly because of getting stuff in the parent is hard and starting with
something in the child is easier. I assume I grasped the DS concept
correct, so if we put the _ NS2 in the parent up to the root we could
bootstrap securely in transport and validation from the root down.
So long
-Ralf
—--
Ralf Weber
_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop
