Re: Fwd: New Version Notification for draft-gieben-epp-keyrelay-00.txt
Antoin Verschuren <[email protected]>
| Newsgroups | gmane.ietf.provreg |
|---|---|
| Message-ID | <[email protected]> |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Op 24-01-13 11:27, Klaus Malorny schreef: > interesting draft. On the first glance, I'd like to note the > following: Hi Klaus, thank you for your feedback. Comments below. > 1. why is the use of the authinfo only optional? Because it is also optional in the EPP transfer command. A registry may declare a transfer token mandatory in local policy, but a registry may also determine that transfers that are not authenticated by a token will proceed if the losing registrar does not object within a certain time frame. A registrar may object if the transfer is not authenticated by a token, but he may also choose not to object, again by his local policy. > 2. The current registrar does not know from which registrar the key > data is coming. In case of problems, he is unable to contact the > respective registrar. Also, he is unable to determine whether the > keys come from different sources and need either to be combined or > replaced. This is a very good suggestion. We will update the message queue format to include the keyrelaying registrar in the next version of the draft. > 3. How long shall the current registrar/name server operator add > the DNSKEYs to the respective zone? This question is process, not syntax. If it needs to be explained, it should be described in koch-dnsop-dnssec-operator-change. I understand your concern. If I were the DNS operator, I would delete the key from my zone if I did not receive a transfer request within a week after the keyrelay request, but again, that is process or local policy and not syntax, and we don't think we need a trigger from the registry for that. We want to keep the keyrelay command as simple as possible for the registry, and leave the logic to the registrars and DNS operators who are in control of the process anyway. - -- Antoin Verschuren Technical Policy Advisor SIDN Meander 501, PO Box 5022, 6802 EA Arnhem, The Netherlands P: +31 26 3525500 M: +31 6 23368970 Mailto: [email protected] XMPP: [email protected] HTTP://www.sidn.nl/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEcBAEBAgAGBQJRASd6AAoJEDqHrM883AgnPEYH/i9itOIqB3fWg9Df4YTazGs2 SUWKzuzdQGv0LU+3T8qTsbbOH5TTISgJAMdbwPw0Fi7GTwBjOH4aH5XDHuWUDKJN jpsGFU2WFJsQSe8FoG77uR5hU/4BY7jlN2BCMh+6pJ8WrMLQehwl0bxbsTi9ezui 27dwFVzI41hWJBexXfbkMURkbWk5tOZ0enqJQsX43te6FN3C2zcemBgwzWI3LkZx xY5mSL/NQO7O8jG+BFs6ybosqeLWeQn67VhiCcu6T3jS7HBmQY4I6FLnAWJriZcI 7k1++mw0Atnj7hBF1rm1j00ijXJNdH2NRhIDGwgtz8LjGKRFCrdeh4aXtJ/AZH0= =RS/l -----END PGP SIGNATURE----- _______________________________________________ provreg mailing list [email protected] https://www.ietf.org/mailman/listinfo/provreg