Re: [IPsec] I-D Action: draft-ietf-ipsecme-split-dns-11.txt

2018-07-22 Thread Tommy Pauly
> On Jul 22, 2018, at 12:01 PM, Paul Wouters wrote: > > On Thu, 19 Jul 2018, Tommy Pauly wrote: > >>> Because you can have more then one INTERNAL_DNSSEC_TA for one domain. >>> Instead, it should read: >>> >>> Any INTERNAL_DNSSEC_TA attribute that is not immediately preceded by an >>>

Re: [IPsec] I-D Action: draft-ietf-ipsecme-split-dns-11.txt

2018-07-22 Thread Paul Wouters
On Thu, 19 Jul 2018, Tommy Pauly wrote: Because you can have more then one INTERNAL_DNSSEC_TA for one domain. Instead, it should read: Any INTERNAL_DNSSEC_TA attribute that is not immediately preceded by an INTERNAL_DNS_DOMAIN or another INTERNAL_DNSSEC_TA attribute applying to