On Fri, 24 Jul 2026, Philip Homburg wrote:
A few arguments to keep DS2 separate from DELEG:
- there are DNSSEC validators that are not recursing. For this reason it
might be more clear to keep DNSSEC separate from delegation.
- An operator may not be interested in DELEG for delegation purposes
but may want to use DS2. It would be extra operational complexity if
the operator would be forced to add a DELEG record just to be able to use
DS2.
Sure, if and when DS2 exists.
- I assume we will get only one chance to introduce a range of parent
types. We may want to err on the side of flexibility.
I see no reason to assume that. We can do whatever we think is reasonable.
To point out what I would hope is obvious, adding features that nobody
use is the sort of thing that makes the DNS Camel cry.
R's,
John
PS: I'll stop now.
_______________________________________________
DNSOP mailing list -- [email protected]
To unsubscribe send an email to [email protected]
