[Dnssec-deployment] not ANY (Re: CAT is signed )

Paul Vixie vixie at isc.org
Thu Jul 1 10:25:28 EDT 2010


> From: Florian Weimer <fweimer at bfk.de>
> Date: Thu, 01 Jul 2010 08:51:48 +0000
> 
> Anyway, this still doesn't answer the question why would you want
> ICANN to revoke TLD delegations ...

never said that, never wanted that, would never want that.

all i want is for icann to be able to remove one NS RR out of an NS RRset
under the following conditions:

	that nameserver is doing something wicked

	private warnings go unheeded for 48+ hours

	there will still be at least two remaining

of course, it would all come down to the definition of "wickedness".


More information about the Dnssec-deployment mailing list