One thing to note: there is an example in this document of the NTA in place at the name NTAMUCH.ORG, with a bogus secure delegation to a child zone in order to illustrate the presence of the EDE in responses.
I set this up in a bit of a hurry without thinking hard enough and Cloudflare's default machinery keeps repairing the delegation, or removing the zone cut (one of those, I can't remember off-hand). So it's not as good as example as I had hoped, right now. We will fix this. Just thought I'd preempt any diligent reviewer who felt the need to point out the delta between text and reality. > On 2 Sep 2026, at 15:30, Babak Farrokhi <[email protected]> > wrote: > > As one of the authors of this draft, I support adoption. The intention > of the authors is to keep improving the draft through WG process and > address review comments, if they are any. > > -- > Babak Farrokhi > > > Ondřej Surý via Datatracker <[email protected]> writes: > >> This message starts a dnsop WG Call for Adoption of: >> draft-farrokhi-dnsop-ede-nta-01 >> >> This Working Group Call for Adoption ends on 2026-09-16 >> >> Abstract: >> This document describes a mechanism for disclosing that a Negative >> Trust Anchor (NTA) was in effect at the time that a DNS response was >> generated, using an Extended DNS Error (EDE). >> >> Please reply to this message and indicate whether or not you support adoption >> of this Internet-Draft by the dnsop WG. Comments to explain your preference >> are greatly appreciated. Please reply to all recipients of this message and >> include this message in your response. >> >> Authors, and WG participants in general, are reminded of the Intellectual >> Property Rights (IPR) disclosure obligations described in BCP 79 [2]. >> Appropriate IPR disclosures required for full conformance with the provisions >> of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware of any. >> Sanctions available for application to violators of IETF IPR Policy can be >> found at [3]. >> >> Thank you. >> [1] https://datatracker.ietf.org/doc/bcp78/ >> [2] https://datatracker.ietf.org/doc/bcp79/ >> [3] https://datatracker.ietf.org/doc/rfc6701/ >> >> The IETF datatracker status page for this Internet-Draft is: >> https://datatracker.ietf.org/doc/draft-farrokhi-dnsop-ede-nta/ >> >> There is also an HTML version available at: >> https://www.ietf.org/archive/id/draft-farrokhi-dnsop-ede-nta-01.html >> >> A diff from the previous version is available at: >> https://author-tools.ietf.org/iddiff?url2=draft-farrokhi-dnsop-ede-nta-01 >> >> _______________________________________________ >> DNSOP mailing list -- [email protected] >> To unsubscribe send an email to [email protected] > > _______________________________________________ > DNSOP mailing list -- [email protected] > To unsubscribe send an email to [email protected] > <signature.asc> _______________________________________________ DNSOP mailing list -- [email protected] To unsubscribe send an email to [email protected]
