Re: [DNSOP] draft-ietf-dnsop-dnssec-key-timing

2014-07-21 Thread Rose, Scott
From: DNSOP dnsop-boun...@ietf.org on behalf of Paul Ebersman list-dn...@dragon.net Sent: Saturday, July 19, 2014 5:21 PM To: dnsop@ietf.org Subject: Re: [DNSOP] draft-ietf-dnsop-dnssec-key-timing ajs giving useful advice, even if not perfect, on this topic will be ajs more helpful than

Re: [DNSOP] draft-ietf-dnsop-dnssec-key-timing

2014-07-21 Thread Paul Ebersman
srose I can't speak for all of .gov, but I think the draft is ready for srose publication. Once it has an RFC number it will get worked into srose products and ops manuals. Since a lot of .gov agencies srose outsource, or use appliances, I wouldn't expect much feedback. :) Having worked

Re: [DNSOP] draft-ietf-dnsop-dnssec-key-timing

2014-07-21 Thread Andrew Sullivan
On Mon, Jul 21, 2014 at 03:10:16PM -0400, Paul Ebersman wrote: Sadly, you are probably right on feedback from some of the vendors and most .govs... Not everyone who consumes our documents (or the results of them) is going to tell us about their experiences. On the other hand, a couple of blog

Re: [DNSOP] draft-ietf-dnsop-dnssec-key-timing

2014-07-21 Thread John Levine
Not everyone who consumes our documents (or the results of them) is going to tell us about their experiences. I'm adding DNSSEC to the zones I host, and I've already found it useful. Ship it, please. R's, John ___ DNSOP mailing list DNSOP@ietf.org

Re: [DNSOP] draft-ietf-dnsop-dnssec-key-timing

2014-07-19 Thread Paul Ebersman
ajs giving useful advice, even if not perfect, on this topic will be ajs more helpful than producting perfect advice. [...] ajs Please publish it. +1 Many folks won't implement this until it's an RFC (.gov, etc.) but will and give feedback once it's out. Perfect is the enemy of progress...

Re: [DNSOP] draft-ietf-dnsop-dnssec-key-timing

2012-08-30 Thread Johan Ihrén
On Aug 20, 2012, at 17:33 , Paul Hoffman wrote: On Aug 20, 2012, at 6:19 AM, Peter Koch p...@denic.de wrote: Andrew, In the archives since the meeting, I observe some comments at http://www.ietf.org/mail-archive/web/dnsop/current/msg09783.html. But I do not observe the announcement of

Re: [DNSOP] draft-ietf-dnsop-dnssec-key-timing

2012-08-30 Thread Paul Vixie
On 2012-08-30 9:40 AM, Johan Ihrén wrote: On Aug 20, 2012, at 17:33 , Paul Hoffman wrote: On Aug 20, 2012, at 6:19 AM, Peter Koch p...@denic.de wrote: My current reading of the sense of the WG is that we move to WGLC with -03, declaring the July 24 suggestion out of scope for this document

Re: [DNSOP] draft-ietf-dnsop-dnssec-key-timing

2012-08-30 Thread Paul Hoffman
On Aug 30, 2012, at 9:45 AM, Paul Vixie p...@redbarn.org wrote: On 2012-08-30 9:40 AM, Johan Ihrén wrote: Not to question the abilities of the WG, but I still have to ask whether (in your opinion) the operations community would be better off with a single document that may be finished

Re: [DNSOP] draft-ietf-dnsop-dnssec-key-timing

2012-08-30 Thread Joe Abley
On 2012-08-30, at 13:11, Paul Hoffman paul.hoff...@vpnc.org wrote: On Aug 30, 2012, at 9:45 AM, Paul Vixie p...@redbarn.org wrote: On 2012-08-30 9:40 AM, Johan Ihrén wrote: Not to question the abilities of the WG, but I still have to ask whether (in your opinion) the operations community

Re: [DNSOP] draft-ietf-dnsop-dnssec-key-timing

2012-08-30 Thread Paul Hoffman
On Aug 30, 2012, at 10:57 AM, Joe Abley joe.ab...@icann.org wrote: I suspect an increasing proportion of operators doing DNSSEC do not care how to do rollovers, in fact. They care that the software they're using to manage keys and sign things is doing the right thing. Good point, yes. The

Re: [DNSOP] draft-ietf-dnsop-dnssec-key-timing

2012-08-30 Thread Tony Finch
Paul Vixie p...@redbarn.org wrote: while i agree with these sentiments i have a broader concern. ietf's mantra is good engineering. if we know now that keytiming has flaws, and we are only considering publishing it because we know our own record shows that reaching consensus for keytiming-bis

Re: [DNSOP] draft-ietf-dnsop-dnssec-key-timing

2012-08-21 Thread Matthijs Mekking
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/20/2012 05:33 PM, Paul Hoffman wrote: On Aug 20, 2012, at 6:19 AM, Peter Koch p...@denic.de wrote: Andrew, In the archives since the meeting, I observe some comments at http://www.ietf.org/mail-archive/web/dnsop/current/msg09783.html.

Re: [DNSOP] draft-ietf-dnsop-dnssec-key-timing

2012-08-21 Thread Paul Hoffman
On Aug 21, 2012, at 12:12 AM, Matthijs Mekking matth...@nlnetlabs.nl wrote: I am afraid that one document just isn't sufficient. Adding a rollover time line requires a fair amount of pages to cover the timing details (at least with the current approach). The current document now covers six

Re: [DNSOP] draft-ietf-dnsop-dnssec-key-timing

2012-08-21 Thread Matthijs Mekking
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/21/2012 05:53 PM, Paul Hoffman wrote: On Aug 21, 2012, at 12:12 AM, Matthijs Mekking matth...@nlnetlabs.nl wrote: I am afraid that one document just isn't sufficient. Adding a rollover time line requires a fair amount of pages to cover the

Re: [DNSOP] draft-ietf-dnsop-dnssec-key-timing

2012-08-20 Thread Paul Hoffman
On Aug 20, 2012, at 6:19 AM, Peter Koch p...@denic.de wrote: Andrew, In the archives since the meeting, I observe some comments at http://www.ietf.org/mail-archive/web/dnsop/current/msg09783.html. But I do not observe the announcement of a WGLC. I am wondering when we might expect that

Re: [DNSOP] draft-ietf-dnsop-dnssec-key-timing-00

2010-10-20 Thread Matthijs Mekking
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/20/2010 01:03 AM, Suzanne Woolf wrote: On Tue, Oct 19, 2010 at 10:22:25AM -0400, Andrew Sullivan wrote: On Tue, Oct 19, 2010 at 10:26:27AM +0200, Johan Ihren wrote: B. Better to publish what we have and initiate work on a -bis document

Re: [DNSOP] draft-ietf-dnsop-dnssec-key-timing-00

2010-10-20 Thread Olafur Gudmundsson
On 20/10/2010 4:32 AM, Matthijs Mekking wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/20/2010 01:03 AM, Suzanne Woolf wrote: On Tue, Oct 19, 2010 at 10:22:25AM -0400, Andrew Sullivan wrote: On Tue, Oct 19, 2010 at 10:26:27AM +0200, Johan Ihren wrote: B. Better to publish what we

Re: [DNSOP] draft-ietf-dnsop-dnssec-key-timing-00

2010-10-19 Thread Andrew Sullivan
On Tue, Oct 19, 2010 at 10:26:27AM +0200, Johan Ihren wrote: B. Better to publish what we have and initiate work on a -bis document immediately. Also known as the Perfect is the Enemy of Timely-alternative. I like this, but I'd like it more if there were text in the document that said

Re: [DNSOP] draft-ietf-dnsop-dnssec-key-timing-00

2010-10-19 Thread Paul Hoffman
At 10:22 AM -0400 10/19/10, Andrew Sullivan wrote: On Tue, Oct 19, 2010 at 10:26:27AM +0200, Johan Ihren wrote: B. Better to publish what we have and initiate work on a -bis document immediately. Also known as the Perfect is the Enemy of Timely-alternative. I like this, but I'd like it more if

Re: [DNSOP] draft-ietf-dnsop-dnssec-key-timing-00

2010-10-19 Thread Suzanne Woolf
On Tue, Oct 19, 2010 at 10:22:25AM -0400, Andrew Sullivan wrote: On Tue, Oct 19, 2010 at 10:26:27AM +0200, Johan Ihren wrote: B. Better to publish what we have and initiate work on a -bis document immediately. Also known as the Perfect is the Enemy of Timely-alternative. I like this,