Re: [IPsec] Alissa Cooper's No Objection on draft-ietf-ipsecme-split-dns-14: (with COMMENT)

2018-11-21 Thread Alissa Cooper



> On Nov 21, 2018, at 1:03 AM, Paul Wouters  wrote:
> 
> On Mon, 19 Nov 2018, Alissa Cooper wrote:
> 
>> --
>> COMMENT:
>> --
>> 
>> Section 5:
>> 
>> "Enterprise Certificate Agency" --> I would have expected this to say
>> Enterprise Certificate Authority.
> 
> Your expectation is correct :) I will fix.
> 
>> "Other generic or public domains, such as top-level domains, similarly SHOULD
>> NOT be whitelisted." Under what exceptional circumstances would it make sense
>> to whitelist a TLD? Is this like if I run Example Corp and I own .example?
> 
> Exactly. Or if you would use .internal or if Warren gets his way .alt :)

Thanks. It might be worth giving an example or two in the document.

Alissa

> 
> Paul

___
IPsec mailing list
IPsec@ietf.org
https://www.ietf.org/mailman/listinfo/ipsec


Re: [IPsec] Alissa Cooper's No Objection on draft-ietf-ipsecme-split-dns-14: (with COMMENT)

2018-11-20 Thread Paul Wouters

On Mon, 19 Nov 2018, Alissa Cooper wrote:


--
COMMENT:
--

Section 5:

"Enterprise Certificate Agency" --> I would have expected this to say
Enterprise Certificate Authority.


Your expectation is correct :) I will fix.


"Other generic or public domains, such as top-level domains, similarly SHOULD
NOT be whitelisted." Under what exceptional circumstances would it make sense
to whitelist a TLD? Is this like if I run Example Corp and I own .example?


Exactly. Or if you would use .internal or if Warren gets his way .alt :)

Paul

___
IPsec mailing list
IPsec@ietf.org
https://www.ietf.org/mailman/listinfo/ipsec