Re: Registry lock - setting statuses on hosts

> How do other registries handle registry lock and for example DNSSEC material updates?

> I.e. it seems to be that a registry lock make key rollover of the KSK for the zone be impossible.

It certainly does seem that it would make that process cumbersome.  Interested in other registry feedback here as well.

-----Original Message-----
From: Patrik Fältström [mailto:[email protected]] 
Sent: October-09-13 10:28 PM
To: Stuart Olmstead-Wilcox
Cc: [email protected]
Subject: Re: [provreg] Registry lock - setting statuses on hosts


On 10 okt 2013, at 03:45, Stuart Olmstead-Wilcox <[email protected]> wrote:

>> Do we actually know exactly what changes are no longer allowed when there is a registry lock?
> 
>> For example, what about DNSSEC material?
> 
> Our initial approach will be to adhere strictly to the serverUpdateProhibited definition.  If set via lock, then no domain updates will be permitted - including DNSSEC material.  
> 
> If this begins to pose a problem in the future (we will be fully epp DNSSEC compliant 1st quarter 2014) we will revisit.

Thanks!

How do other registries handle registry lock and for example DNSSEC material updates?

I.e. it seems to be that a registry lock make key rollover of the KSK for the zone be impossible.

   Patrik

_______________________________________________
provreg mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/provreg