[dns-operations] Delegation checking (was: Re: Some DNSSECtrivia)

[Antoin Verschuren]

dns-operations-bounces at lists.oarci.net wrote:
> 
> But, back to what I have found the harder question during the years,
> and that is what should happen if the tests fail? Should the
> delegation be withdrawn?

We do delegation checks, including IPv6 btw.
Now only at the time of delegation and modification.
And the result is that we have <4% lameness.
I think 100% is non lame is not possible, but we can do more.

So we we are going to introduce an incentive for registrars.
Checking all their delegation on a regular basis.
And reporting back the errors.
And reporting back their "place on the list" compared to their 
competitors.
The top of the list (the best registrars) will get a "premium" status.
Registrars that fail to reach some minimal standard wil be suspended.
So let the market do the work.

Be aware that we consider it the registrar's job to see if their 
registrants behave. It's simply delegating responsibility. If you're not 
fit to carry that responsibility, you shouldn't play the game.

Antoin Verschuren

Technical Policy Advisor
SIDN
Utrechtseweg 310
PO Box 5022
6802 EA Arnhem
The Netherlands

T +31 26 3525500
F +31 26 3525505
M +31 6 23368970
E antoin.verschuren at sidn.nl
W http://www.sidn.nl/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20080109/99562b68/attachment.html>