search

timapril / ns2

Parameterized Nameserver Delegation with NS2 and NS2T
Other
1 stars 0 forks source link

Consider an similar approach to CDS/CDNSKEY for publication in the parent #7

Closed timapril closed 4 years ago

timapril commented 4 years ago

this is a tricky thing to get right, probably better for its own document after the fact, maybe once this one has more work done to it.

timapril commented 4 years ago

Basically reference back to RFC8078.

The child zone MUST be signed, CNS2 records MUST have a valid signature

Having this record type will reduce the demand on updating Registry Software, the EPP protocol and registrar support.

Should the registry keep track of when the RRSIG expires and re-poll at that point? keeping in mind that it should not poll faster than a set threshold.

timapril commented 4 years ago

Adding a discussion to the draft talking about not including this in the draft.

timapril commented 4 years ago

Resolved in #16