[Dnssec-deployment] not ANY (Re: CAT is signed )
drc at virtualized.org
Thu Jul 1 15:33:31 EDT 2010
On Jul 1, 2010, at 7:25 AM, Paul Vixie wrote:
> all i want is for icann to be able to remove one NS RR out of an NS RRset
> under the following conditions:
> that nameserver is doing something wicked
> private warnings go unheeded for 48+ hours
> there will still be at least two remaining
> of course, it would all come down to the definition of "wickedness".
What happens when the remaining two NSes are also "doing something wicked"?
More information about the Dnssec-deployment