Re: [DNSOP] John Scudder's No Objection on draft-ietf-dnsop-dns-tcp-requirements-13: (with COMMENT)

2021-11-05 Thread Wessels, Duane
John, thanks for the review. > On Oct 28, 2021, at 6:42 AM, John Scudder via Datatracker > wrote: > > > > -- > COMMENT: > -- > > Thanks for the

Re: [DNSOP] Éric Vyncke's No Objection on draft-ietf-dnsop-dns-tcp-requirements-13: (with COMMENT)

2021-11-05 Thread Wessels, Duane
Hi Éric, thank you for the review! > On Oct 28, 2021, at 5:33 AM, Éric Vyncke via Datatracker > wrote: > > -- > COMMENT: > -- > > Thank you for the work

Re: [DNSOP] nsec3-parameters opinions gathered

2021-11-05 Thread Viktor Dukhovni
> On 5 Nov 2021, at 3:19 pm, Olafur Gudmundsson wrote: > > Publishing iteration count higher than 10 is reckless as that affects the > performance of recursive resolvers in particular the ones that run on small > CPE equipment. > > The document should strongly discourage any use of NSEC3 >

Re: [DNSOP] nsec3-parameters opinions gathered

2021-11-05 Thread Olafur Gudmundsson
Publishing iteration count higher than 10 is reckless as that affects the performance of recursive resolvers in particular the ones that run on small CPE equipment. The document should strongly discourage any use of NSEC3 For the that want to keep using it the limit should be real low of

Re: [DNSOP] Erik Kline's Yes on draft-ietf-dnsop-dns-tcp-requirements-13: (with COMMENT)

2021-11-05 Thread Erik Kline
On Fri, Nov 5, 2021 at 10:02 AM Wessels, Duane wrote: > > > > On Nov 1, 2021, at 3:29 PM, Erik Kline wrote: > > > > Caution: This email originated from outside the organization. Do not > click links or open attachments unless you recognize the sender and know > the content is safe. > > > >>>

Re: [DNSOP] Erik Kline's Yes on draft-ietf-dnsop-dns-tcp-requirements-13: (with COMMENT)

2021-11-05 Thread Wessels, Duane
> On Nov 1, 2021, at 3:29 PM, Erik Kline wrote: > > Caution: This email originated from outside the organization. Do not click > links or open attachments unless you recognize the sender and know the > content is safe. > >>> [S4.1, comment] >>> >>> * "Resolvers and other DNS clients

Re: [DNSOP] nsec3-parameters opinions gathered

2021-11-05 Thread Benno Overeinder
Wes, On 05/11/2021 09:40, Vladimír Čunát wrote: On 04/11/2021 23.44, Wes Hardaker wrote: The most important sticking point is there are 4 implementations (thank you for the links Matthijs) that have implemented 150.  Since DNSOP strives for implementations of specs, I think this is the number

Re: [DNSOP] nsec3-parameters opinions gathered

2021-11-05 Thread Vladimír Čunát
On 04/11/2021 23.44, Wes Hardaker wrote: The most important sticking point is there are 4 implementations (thank you for the links Matthijs) that have implemented 150. Since DNSOP strives for implementations of specs, I think this is the number we should publish*unless the vendors speak up and

Re: [DNSOP] nsec3-parameters opinions gathered

2021-11-05 Thread Miek Gieben
[ Quoting in "[DNSOP] nsec3-parameters opinions g..." ] I was waiting for the last discussion to die down (and then, um, for me to finally examine the opinions). The results are in from the people that weighed in: | who | wants | accepts|