Re: Example of stupid inconsistencies between registries

Fred,

> Which basically proofs that the DNSKEY interface is not suitable for
> pre-publications too. Remember the purpose of this is to not
> pre-expose the public-key, so why show it to your registry.

i was not referring to the purpose of hiding the key (a myth anyway)
but to what 4641bis (4.1.3) calls "double DS rollover".  That
section explains why there is not always a DNSKEY RR in the DNS
for a DS to be published at the parent.

-Peter
_______________________________________________
provreg mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/provreg