Re: Example of stupid inconsistencies between registries

On Mon, Mar 05, 2012 at 02:51:46PM +0100, Patrik Fältström wrote:
> 
> Who is responsible for doing the validation? The registry or the registrar?

The registrar isn't publishing the authoritative zone, so it seems to
me that the registry is the one on the hook here.

Again, I want to emphasise the difference between DS and, say, NS.
There is nothing in the history of the DNS that is remotely analogous
to the DS record: nothing else is parent-side-only authoritative
data.  (One might lament that fact, but it's still the case).

> The problem here is that a registrant must give different data to
> the same registrar depending on the TLD.

Your complaint seems to be that a registrant has to provide different
data for different names.  I fail completely to see why that is a
problem.  (To put this slightly differently, you seem to be arguing
that a registrant shouldn't need to understand that example.com and
example.org are different domains.  This seems a little bit at odds
with your views on the many things people call "variants".)

> That is creating problems and it does not matter what the registrar does to resolve this.

Well, one possibility, it seems, is for the registrar to accept a DS
record for the name, look for the corresponding DNSKEY in the DNS,
pull that out, and send it along.  If the DNSKEY isn't there (see a
note downthread about this) then you have a problem.  But if the
registrant is too badly informed to understand the difference between
DNSKEY and DS, then I suspect s/he won't know how to prepublish DS
either.  

> My point is that I clearly see that the chance that the same
> registrar will implement both DS and KEY interface to TLDs is
> extremely small. Simply because the interaction with the registrant
> is too complicated. Instead, I think we will see registrars
> supporting either DS or KEY, and because of that support for DNSSEC
> will differ depending on support at registry.

Surely this is the point of having a competitive market?

Best,
A

-- 
Andrew Sullivan
[email protected]
_______________________________________________
provreg mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/provreg