Re: Registry lock - setting statuses on hosts

Patrik Fältström <[email protected]> Thu, 10 Oct 2013 04:27:37 +0200
Newsgroups gmane.ietf.provreg
Message-ID <[email protected]>
On 10 okt 2013, at 03:45, Stuart Olmstead-Wilcox <[email protected]> wrote:

>> Do we actually know exactly what changes are no longer allowed when there is a registry lock?
> 
>> For example, what about DNSSEC material?
> 
> Our initial approach will be to adhere strictly to the serverUpdateProhibited definition.  If set via lock, then no domain updates will be permitted - including DNSSEC material.  
> 
> If this begins to pose a problem in the future (we will be fully epp DNSSEC compliant 1st quarter 2014) we will revisit.

Thanks!

How do other registries handle registry lock and for example DNSSEC material updates?

I.e. it seems to be that a registry lock make key rollover of the KSK for the zone be impossible.

   Patrik

_______________________________________________
provreg mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/provreg
signature.asc (application/pgp-signature, 195 B)
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org

iD8DBQFSVhCZrMabGguI180RAhfiAJwPDpW7xBQSmzXZ/OPWRJFioftQ+wCffEj2
Ew49HYHoPfyYODBeWqdYeRM=
=Uywi
-----END PGP SIGNATURE-----