[Dnssec-deployment] not ANY (Re: CAT is signed )

David Conrad drc at virtualized.org
Thu Jul 1 15:33:31 EDT 2010


On Jul 1, 2010, at 7:25 AM, Paul Vixie wrote:
> all i want is for icann to be able to remove one NS RR out of an NS RRset
> under the following conditions:
> 
> 	that nameserver is doing something wicked
> 
> 	private warnings go unheeded for 48+ hours
> 
> 	there will still be at least two remaining
> 
> of course, it would all come down to the definition of "wickedness".

What happens when the remaining two NSes are also "doing something wicked"?

Regards,
-drc




More information about the Dnssec-deployment mailing list