[dns-operations] No public calendar for the root signing deployment

[Florian Weimer]

* Stephane Bortzmeyer:

> Well, at least one root zone operator believes otherwise:
>
> http://labs.ripe.net/content/preparing-k-root-signed-root-zone
>
> Thanks to them for correct and detailed communication.

Indeed, thanks.  Is there some way to provide feedback?

There seems to be an issue with the tester; the delegation for
rs.ripe.net appears to be incorrect:

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42541
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; QUESTION SECTION:
;test.rs.ripe.net.              IN      TXT

;; AUTHORITY SECTION:
rs.ripe.net.            172800  IN      NS      ns00.rs.ripe.net.

;; ADDITIONAL SECTION:
ns00.rs.ripe.net.       172800  IN      A       193.0.15.42

;; Query time: 42 msec
;; SERVER: 192.36.125.2#53(sunic.sunet.se)
;; WHEN: Thu Dec 10 15:00:22 2009
;; MSG SIZE  rcvd: 69

But:

; <<>> DiG 9.5.1-P3 <<>> @193.0.15.42 ns00.rs.ripe.net.
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 16835
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;ns00.rs.ripe.net.              IN      A

;; Query time: 283 msec
;; SERVER: 193.0.15.42#53(193.0.15.42)
;; WHEN: Thu Dec 10 15:26:46 2009
;; MSG SIZE  rcvd: 34

I'm also curious about the plans for the DF bit in replies.
(IMO, the only correct thing to do is to switch it off.)

-- 
Florian Weimer                <fweimer at bfk.de>
BFK edv-consulting GmbH       http://www.bfk.de/
Kriegsstraße 100              tel: +49-721-96201-1
D-76133 Karlsruhe             fax: +49-721-96201-99