[Dnssec-deployment] Auth servers for signed zones refusing TCP

Ray Bellis Ray.Bellis at nominet.org.uk
Mon Jun 13 04:30:05 EDT 2011


On 10 Jun 2011, at 17:27, Peter Koch wrote:

> And before throwing, please read the introduction of RFC 5966,
> especially where it frames the target audience.

+1

I would have liked to have put in a stronger _operational_ statement that TCP is required unless you _really, really_, know that you don't need it.

However various parties (correctly) pointed out that you can't put operational requirements in a protocol specification document.

Ray



More information about the Dnssec-deployment mailing list