Re: Why I want to remove the null key SIG

[Bill Manning <bmanning@ISI.EDU>]

%     We can have DNSsec with COTS but then large flat name spaces
%     become untenable.  We can have DNSsec w/ large flat spaces,
%     but then have to have special hw or we can have large flat
%     spaces & COTS, giving up DNSsec.
% 
% 
% On what grounds do you come to this conclusion? Do you have any
% data to support this?
% 
% 	jaap

Ok, I'll admint some unlisted assumptions. 
	) zones should be signed in a timely manner e.g. less than 4hours
	) COTS technologies today are represented by 1 or 2 G of memory,
	  subGhz processors.
	) large flat name spaces have around 1 million entries

tests done in the US on some large zones (com.) and some tests done in 
Europe (de.) indicate that with current COTS and these zones, the time
test fails. 

-- 
--bill


to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.