[Dnssec-deployment] not ANY (Re: CAT is signed )

David Conrad drc at virtualized.org
Thu Jul 1 15:33:31 EDT 2010

On Jul 1, 2010, at 7:25 AM, Paul Vixie wrote:
> all i want is for icann to be able to remove one NS RR out of an NS RRset
> under the following conditions:
> 	that nameserver is doing something wicked
> 	private warnings go unheeded for 48+ hours
> 	there will still be at least two remaining
> of course, it would all come down to the definition of "wickedness".

What happens when the remaining two NSes are also "doing something wicked"?


More information about the Dnssec-deployment mailing list