[dnssec-deployment] Filling the IANA ITAR
bmanning at vacation.karoshi.com
bmanning at vacation.karoshi.com
Wed Oct 28 08:10:43 EDT 2009
so ,
had a fine presentation or two today in the DNSSEC WG here in Seoul.
w/o comment, it was noted that .UK has zero intenet to support RFC 5011, will not publish
their keys on a website, won't put them in the ITAR or dlv.
mroe interesting for those ITAR-smitten. There is no plan to move the ITAR into
the root zone. Folks who want their DS records in the root zone will have to
submit them -after- the root gets signed. There is no plan to automatically remove
data from the ITAR when the DS records are added to the root zone.
This last leads me to beleive that there will be a raft of inconsistencies
as folks forget to pull old data out of the ITAR - or to scrub those DLV registries
that import form the ITAR.
Richard or Matt, if you could clarify, I would be most greatful
--bill
More information about the Dnssec-deployment
mailing list