[DNSOP] new DNS classes for fun and profit

2013-04-18 Thread Jim Reid
On 18 Apr 2013, at 04:31, Erik Kline e...@google.com wrote: Do people even contemplate new classes anymore? Yes. A now dead Swiss(?) academic got paid by the ITU to promote this idea 4-5 years ago after he presented it at WSIS and IGF. The concept was to increase competition in the DNS name

[DNSOP] Thoughts on CDS

2013-04-18 Thread Edward Lewis
I was thinking a bit about the CDS draft, not specifically it, but the problem it is addressing. This message was spurred by a comment that in a key emergency where the private key is exposed the only way to go forward is to completely stop DNSSEC and then do a re-start from state 0. The

Re: [DNSOP] Thoughts on CDS

2013-04-18 Thread Wes Hardaker
Edward Lewis ed.le...@neustar.biz writes: [Ed's well written and long thoughts about transfer issues removed] Security vs operational practice has always been a contention. Security purists want the strictest of controls so that nothing can ever be stolen, misused, abused, modified, etc.