[dns-operations] Delegation checking (was: Re: Some DNSSEC trivia)

[Andrew Sullivan]

On Thu, Jan 10, 2008 at 10:54:48AM +0100, Patrik Wallstrom wrote:
> 
> But how do you tell the difference between a registrant and a
> nameserver operator just handling the DNS for a registrant? You can't.
> 
> So, could a registry contact SOA rname?

Probably you could contact the SOA rname if you didn't have that email
address as any of the contacts for the domain in your own database.
(Afilias-operated domains are usually "thick": we have the contact
data.  We're just not allowed to use it.  Also, registrars have to
keep a copy.  I will not post my data-geek reactions to the idea that
you keep two separate databases in two separate systems with "the
same" data, kept in sync by processes not controlled by both sides.)

A

-- 
Andrew Sullivan                         204-4141 Yonge Street
Afilias Canada                        Toronto, Ontario Canada
<andrew at ca.afilias.info>                              M2P 2A8
jabber: ajsaf at jabber.org                 +1 416 646 3304 x4110