> On Apr 29, 2020, at 11:46 PM, Paul Wouters <p...@nohats.ca> wrote: > >> For example, the spec could exclude domain >> names that start with "_" or "_sentinel". And the sentinel names could >> then all live there. > > It already does, because the _prefix really belongs to the domain and is > never a delegation. It would be a hassle if we have to make signed > delegations for _tcp (for TLSA) or _opengpgkey or _smimea records.
Yes, just finished finished reading the draft and noticed the same. Perhaps not such a crazy refinement, if we're arriving at it independently. I support the adoption of the draft. -- Viktor. _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop