On Fri, 24 Jul 2026, Joe Abley wrote:
Sure, but how does that make a DS2 record useful? It needs a resolver that
understands more than NS and DS. Why would you do that and not also do DELEG?
I think that's an interesting question and I understand why you're asking it.
But not knowing an answer today doesn't mean we won't find one in the future.
Unless the deliberate goal is to make it impossible to do this for some reason,
it feels like closing the door is a poor choice.
Suppose DELEG is not deployed in a meaningful way, for some reason, but some
other use case for parent-side type comes to light after DELEG has been
abandoned. Is there a cost I am not seeing in making that situation easy to
handle now?
While that seems hypothetically possible, it doesn't seem likely enough to
be worth adding yet another wart to the DNS. If we reserve a range for
DS2 records, does that mean that name servers have to add code to handle
RRs in that range, even though there aren't any now and probably never
will be?
Here's my counterproposal: do nothing now. If it turns out that something
like DS2 is useful, we can reserve the range when we have something to put
in it, in the RFC that defines the DS2 record.
R's,
John
_______________________________________________
DNSOP mailing list -- [email protected]
To unsubscribe send an email to [email protected]
