[dns-operations] Allowance for inaccurate clocks

George Barwood george.barwood at blueyonder.co.uk
Wed Mar 16 10:42:55 UTC 2011

When checking signature inception/expiration fields in DNSSEC, should a validator
make an allowance for small inaccuracies in clocks?

Or is this the job of the zone signer? I'm not aware anything in the standard on this issue.

Anyone have views on how much allowance should be made?

More information about the dns-operations mailing list