[dns-operations] FW: Delegation checking (was: Re: Some DNSSECtrivia)

[dns ops]

Hmm, this post seems to not have reached the list:

dns-operations-bounces at lists.oarci.net wrote:
> 
> But, back to what I have found the harder question during the years,
> and that is what should happen if the tests fail? Should the
> delegation be withdrawn?
 
We do delegation checks, including IPv6 btw.
Now only at the time of delegation and modification.
And the result is that we have <4% lameness.
I think 100% is non lame is not possible, but we can do more.

So we we are going to introduce an incentive for registrars. Checking
all their delegation on a regular basis. And reporting back the
errors. And reporting back their "place on the list" compared to
their competitors.   
The top of the list (the best registrars) will get a "premium"
status. And "premium" benefits. Registrars that fail to reach some 
minimal standard wil be suspended. So let the market do the work.  

Be aware that we consider it the registrar's job to see if their
registrants behave. It's simply delegating responsibility. If you're
not fit to carry that responsibility, you shouldn't play the game.  

We do have deletions of domains when the technical requirements are
not met. But this deletion must be initiated by the registrar when he
has failed to convince the registrant of his responsibility to have a
properly set up zone. It's in our t&c's that a registrant has this
obligation, and that deletion may follow.    



Antoin Verschuren

Technical Policy Advisor
SIDN
Utrechtseweg 310
PO Box 5022
6802 EA Arnhem
The Netherlands

T +31 26 3525500
F +31 26 3525505
M +31 6 23368970
E antoin.verschuren at sidn.nl
W http://www.sidn.nl/