[dnssec-deployment] NSEC3 progress

[Allison Mankin]

Hi, Olaf,

> and organise a workshop to understand possible issues. In the past  
> those workshops have shown to be more than worthwhile in getting good  
> specs. Question: anybody doing an implementation, server/client side?

> As far as I understand the "epsilon" work seems to be heading to non- 
> deployment. I have not heard of anybody seriously planning on its  
> deployment. 

It surely is hard to deploy what's not implemented :)  So I guess
you are also saying you have not heard of any implementation? 
(Which is what's been said in the teleconfs in passing a couple of times...)
I would like to explicitly query on this, and add something to your
query above.  I think that workshop you propose on NSEC3 should be
like a forcing function:  it should try to bring both server and
client implementations to good states at an early date.

> I think it would be a shame to let the epsilon related  
> drafts die a slow death and think it would be good if they would be  
> published as informational. While writing this I realise I should  
> probably bring this point to namedroppers.

I agree, not at all a topic for this list.

Allison