[dnssec-deployment] NSEC3 progress

[Olaf M. Kolkman]

On Wed, 25 May 2005 10:54:46 -0700
Allison Mankin <mankin at psg.com> wrote:

> Hi, Olaf,
> 
> > and organise a workshop to understand possible issues. In the past  
> > those workshops have shown to be more than worthwhile in getting good  
> > specs. Question: anybody doing an implementation, server/client side?
> 
> > As far as I understand the "epsilon" work seems to be heading to non- 
> > deployment. I have not heard of anybody seriously planning on its  
> > deployment. 
> 
> It surely is hard to deploy what's not implemented :)  So I guess
> you are also saying you have not heard of any implementation? 

I have made a "proof of concept" in perl. But that implementation is
really not more than a crude hack and would not scale to any serious
production. Registries seriously considering deployment should write
their own code and I am not sure of any of that work has been done. 



> (Which is what's been said in the teleconfs in passing a couple of times...)
> I would like to explicitly query on this, and add something to your
> query above.  I think that workshop you propose on NSEC3 should be
> like a forcing function:  it should try to bring both server and
> client implementations to good states at an early date.


My gut feeling is that such a workshop could be done in Europe, since
most of the stake holders are located there. That such workhsop does
not necessarily need to piggy back on a RIPE meeting or a IETF meeting
and that September/October seems a nice target. 



-- Olaf

---------------------------------| Olaf M. Kolkman
---------------------------------| RIPE NCC
---------------------------------| JID: olaf at jabber.secret-wg.org