Re: Registry lock - setting statuses on hosts

I'd like to follow up this question with a similar question....

Should anything be allowed to block an EPP based DNSSEC update?

ie any type of registry/domain/host whatever lock... only exception
being ServerHold - which to me is the Registrar has been locked out of
the Registry System...

I believe it is "No" - in order to keep DNSSEC updates as simple as
possible. (KISS).  Even if the Nameservers (and associated) records of a
domain are no longer being published (In a Delete/Redemption or
ClientHold) - I think the Registry should still not hinder a DNSSEC
Update/Key Rollover.
This could stop a Key-Rollover completing if the DNS Provider can not
see "DS's" - because Records are not being published - but that is a
different problem.

What do registries say/do?


On Thu, 2013-10-10 at 04:27 +0200, Patrik Fältström wrote:
> On 10 okt 2013, at 03:45, Stuart Olmstead-Wilcox <[email protected]> wrote:
> 
> >> Do we actually know exactly what changes are no longer allowed when there is a registry lock?
> > 
> >> For example, what about DNSSEC material?
> > 
> > Our initial approach will be to adhere strictly to the serverUpdateProhibited definition.  If set via lock, then no domain updates will be permitted - including DNSSEC material.  
> > 
> > If this begins to pose a problem in the future (we will be fully epp DNSSEC compliant 1st quarter 2014) we will revisit.
> 
> Thanks!
> 
> How do other registries handle registry lock and for example DNSSEC material updates?
> 
> I.e. it seems to be that a registry lock make key rollover of the KSK for the zone be impossible.
> 
>    Patrik
> 
> _______________________________________________
> provreg mailing list
> [email protected]
> https://www.ietf.org/mailman/listinfo/provreg

-- 
  .  .     ___. .__      Posix Systems - (South) Africa
 /| /|       / /__       [email protected]  -  Mark J Elkins, Cisco CCIE
/ |/ |ARK \_/ /__ LKINS  Tel: +27 12 807 0590  Cell: +27 82 601 0496


_______________________________________________
provreg mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/provreg