[as112-ops] Survey about RFC 7534

[Brian Dickson]

Hi, folks,
I'm interesting in gathering some input on a few things.

TL;DR: Here's a surveymonkey survey:
https://www.surveymonkey.com/r/SBDFLHK

Your feedback would be greatly appreciated.
I am happy to share the results with this list, as well as with the OARC
folks to include on the ops-listing page.

This survey covers the following things:

   - Whether individual operators are implementing RFC 7534 (new style) or
   not.
   - Whether having a DNSSEC signed zone is something they are interested
   in or would be okay with, either upgrading the current zone or via adding a
   new signed zone.


(This would be something I'd propose in the IETF DNSOP working group, only
if there was enough operator interest in doing this.)

There are use cases for the RFC 7535 (DNAME) technique that would benefit
from having a signed zone, to prevent the possibility of anyone standing up
a "rogue" AS112 instance that could answer anything other than NXDOMAIN.

I also understand there are use cases for having an unsigned target for
DNAME, such as for home.arpa, but I think there are methods of doing both.
(Seriously Rube Goldberg ways, but ways that will nonetheless work -- e.g.
two DNAMEs instead of one, and an unsigned delegation at the intermediate
DNAME target.)

Thanks in advance for your feedback.
Brian Dickson
(At GoDaddy but only gathering input for providing to the coordinators of
AS112 and for evaluating a possible proposal, and speaking only as an
individual.)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/mailman/private/as112-ops/attachments/20200619/19728656/attachment.html>