Re: [dnsext] RRTYPE request: template for proposed RKEY RRtype

["Ondřej Surý" <ondrej.sury@nic.cz>]

2008/12/4 Jim Reid <jim@rfc1035.com>:
> On Dec 4, 2008, at 12:23, Ondřej Surý wrote:
>
>> Or owner can publish two RKEYs and start encrypting with second key
>> after all caches are clear.  (similar to pre-publish method of rotating
>> DNSKEYs).  Or am I missing something?
>
> Yes. Implementation details that are not germane to what should be getting
> discussed here: namely the template and type code assignment.

I agree here.

> I have already stated key rollover is not necessary. An RKEY is bound to a
> bunch of encrypted NAPTRs. Both get generated and managed as a single
> entity. [This is from an implementation perspective, not from a DNS protocol
> perspective.] If they are not co-ordinated in that way, bad things will
> happen to whoever broke that linkage. Their problem. Not this WG's. From a
> DNS protocol point of view this is no different from having an MX record
> point at a non-existent hostname.

I also agree here.

And I support this proposal for RR Type assignment.

Ondrej
-- 
 Ondrej Sury
 technicky reditel/Chief Technical Officer
 -----------------------------------------
 CZ.NIC, z.s.p.o.  --  .cz domain registry
 Americka 23,120 00 Praha 2,Czech Republic
 mailto:ondrej.sury@nic.cz  http://nic.cz/
 sip:ondrej.sury@nic.cz tel:+420.222745110
 mob:+420.739013699     fax:+420.222745112
 -----------------------------------------