> On Apr 29, 2020, at 11:46 PM, Paul Wouters <[email protected]> wrote:
>
>> For example, the spec could exclude domain
>> names that start with "_" or "_sentinel". And the sentinel names could
>> then all live there.
>
> It already does, because the _prefix really belongs to the domain and is
> never a delegation. It would be a hassle if we have to make signed
> delegations for _tcp (for TLSA) or _opengpgkey or _smimea records.
Yes, just finished finished reading the draft and noticed the same. Perhaps not
such a crazy refinement, if we're arriving at it independently.
I support the adoption of the draft.
--
Viktor.
_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop