Hi Florian,
On 10/29/25 10:27, Florian Obser wrote:
- Also, consider switch sections 4.2 and 4.3.
Could you elaborate why?
We chose to use this order because
- it's the same order as in 7583
- the zsk case is arguably the easier one, so get that one out of the
way first ;)
- 4.3 references 4.2
I had considered dealing with the KSK case first because that's probably
the one people run into most of the time.
I'm curious to hear why you would like to switch the order.
For the reason you pointed out ("the one people run into most of the time").
Also, I like to think of key structures as KSK/ZSK(/CSK, perhaps), mentally
following from the root to a zone's RRSIG. But that's just how I would perceive
the flow as smooth; it's not a technical argument at all and I don't feel
strongly.
Peter
_______________________________________________
DNSOP mailing list -- [email protected]
To unsubscribe send an email to [email protected]
