Re: [DNSOP] draft-dnsop-dnssec-extension-pkix on IETF117 dnsop agenda?

2023-07-17 Thread Paul Wouters
On Jul 16, 2023, at 15:53, Viktor Dukhovni wrote: > >  > I should perhaps have stated the technical criteria on which I consider > the proposal non-viable. To whit: > >- The proposed protocol lacks all downgrade resistance. >- Without a signed delegation from the parent, the existence

Re: [DNSOP] draft-dnsop-dnssec-extension-pkix on IETF117 dnsop agenda?

2023-07-16 Thread Mark Andrews
> On 17 Jul 2023, at 05:53, Viktor Dukhovni wrote: > > On Sun, Jul 16, 2023 at 03:06:35PM -0400, Viktor Dukhovni wrote: >> I see that draft-dnsop-dnssec-extension-pkix is included on the IETF117 >> dnsop agenda. >> >>https://datatracker.ietf.org/doc/

Re: [DNSOP] draft-dnsop-dnssec-extension-pkix on IETF117 dnsop agenda?

2023-07-16 Thread Viktor Dukhovni
On Sun, Jul 16, 2023 at 03:06:35PM -0400, Viktor Dukhovni wrote: > I see that draft-dnsop-dnssec-extension-pkix is included on the IETF117 dnsop > agenda. > > https://datatracker.ietf.org/doc/draft-dnsop-dnssec-extension-pkix/ > > I haven't seen prior discussion of thi

[DNSOP] draft-dnsop-dnssec-extension-pkix on IETF117 dnsop agenda?

2023-07-16 Thread Viktor Dukhovni
I see that draft-dnsop-dnssec-extension-pkix is included on the IETF117 dnsop agenda. https://datatracker.ietf.org/doc/draft-dnsop-dnssec-extension-pkix/ I haven't seen prior discussion of this item on the list, and, personally, rather suspect it unlikely to gain meaningful support from