On 24 Jul 2026, at 10:03, John R Levine <[email protected]> wrote:

> On Fri, 24 Jul 2026, Mark Andrews wrote:
>> You don’t have to implement DELEG to validate DELEG records.
> 
> Sure, but how does that make a DS2 record useful? It needs a resolver that 
> understands more than NS and DS.  Why would you do that and not also do DELEG?

I think that's an interesting question and I understand why you're asking it. 

But not knowing an answer today doesn't mean we won't find one in the future. 
Unless the deliberate goal is to make it impossible to do this for some reason, 
it feels like closing the door is a poor choice. 

Suppose DELEG is not deployed in a meaningful way, for some reason, but some 
other use case for parent-side type comes to light after DELEG has been 
abandoned. Is there a cost I am not seeing in making that situation easy to 
handle now?

To be clear, this is not a criticism of DELEG. I am in favour of people 
implementing it and will do what I can to help make that happen. But things 
don't always work out. 


Joe

_______________________________________________
DNSOP mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to