[dns-operations] Validation direction (Was: Re: Org Dnskey TTL)

[Joe Abley]

On 2010-04-20, at 10:07, Phil Regnauld wrote:

> 	Is there some inherent advantage to doing bottom-up validation ?
> 	I can understand why one would want to do top-down: at first thought,
> 	there is less back-and-forth that needs to be done, as one can pick up
> 	(NS, DS+RRSIG), and (NS+RRSIG, DNSKEY+RRSIG) -- if querying ANY with DO,
> 	that is.  Otherwise, I guess it's the same amount of work ?  Maybe less
> 	state to keep in one mode vs the other.

Top-down seems like it would present far less latency to recursive clients, especially in the case where DNSKEY RRSets are opportunistically fetched and cached during regular top-down resolution.

It had not actually occurred to me that anybody would think bottom-up was a good idea.


Joe