Re: draft-kong-epp-cdn-dnssec-mapping-00 Submitted for Review

Ning,

RFC 5910 defines both the DS Data Interface and the Key Data Interface,
where the Registry must support one or the other except during a
transition period.  If the Registry supported the Key Data Interface
instead of the DS Data Interface the inheritance model that you're looking
for would be met with a greatly simplified interface for the registrars.

--


JG



James Gould
Principal Software Engineer
[email protected]

703-948-3271
21345 Ridgetop Circle
LS2-2-1
Dulles, VA 20166

VerisignInc.com




On 10/30/11 2:05 AM, "Ning Kong" <[email protected]> wrote:

>Hi Peter,
>
>> so, why not operate on DNSKEY only - instead of DS?
>
>I also think the use of the DNSKEY with the Key Data Interface is more
>convenient. Because the DS Data Interface is defined by RFC 5910, I think
>it's difficult to forbid CDN registrars to use the DS Data Interface. So
>we
>extended both interfaces in our draft.
>
>Ning
>
>_______________________________________________
>provreg mailing list
>[email protected]
>https://www.ietf.org/mailman/listinfo/provreg

_______________________________________________
provreg mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/provreg