[dns-operations] Org Dnskey TTL

Mark Andrews marka at isc.org
Tue Apr 20 22:56:45 UTC 2010


In message <20100420135941.GF43732 at shinkuro.com>, Andrew Sullivan writes:
> On Tue, Apr 20, 2010 at 03:45:10PM +0200, Phil Regnauld wrote:
> > 
> > 	That's a valid observation of the popularity of a given zone, but not t
> o
> > 	be confused with a protocol requirement.
> 
> Sorry, I guess I wasn't clear enough.  The question was whether the
> short TTL causes operational effects.  The answer was no, but maybe as
> there were more zones signed under .org there would be because the
> .org key would need to be fetched more often.  Certainly, that key
> will need to be fetched more often than otherwise if many child zones
> are signed and validators do bottom-up validation.  If just about
> every validator ends up going top-down, then there will be no effect
> (as Mark suggested), because validation will just stop at org for
> unsigned zones (but in any case, the key will have to be fetched after
> the TTL).

Top down or bottom up doesn't impact the number of times the DNSKEY
will be fetched.
 
> A
> 
> -- 
> Andrew Sullivan
> ajs at shinkuro.com
> Shinkuro, Inc.
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org



More information about the dns-operations mailing list