[dnssec-deployment] meeting announcement: 18 June 2008
Edward Lewis
Ed.Lewis at neustar.biz
Fri Jun 20 11:48:52 EDT 2008
At 9:51 -0400 6/18/08, Suresh Krishnaswamy wrote:
>Slides should be attached
Comments on those slides, other than comments I have already made on the paper.
Slide 4
TARs "will reduce the need for parent zones to support DNSSEC."
Judging from my experience, DNSSEC is just not being adopted. TARs,
or the "threat of them" are not the roadblocks.
These two bullets are mutually at odds:
- Zones that currently publish SEP key information in the TAR will
not see a need for switching over to using the parent
- TAR registration represents an additional burden for the zone owner
If it is a burden, there is a need to switch. Changes are made for
two reasons - increase revenue or reduce costs. Removing a burden is
a cost reduction (all other things being equal)
Slide 9
Multiple instances - if anyone runs any TAR, it will have multiple
instances. That's a given. You can't achieve reliability with just
one or even just two instances of a service.
--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Edward Lewis +1-571-434-5468
NeuStar
Never confuse activity with progress. Activity pays more.
More information about the Dnssec-deployment
mailing list