[dns-operations] Implementation of negative trust anchors?

Livingood, Jason Jason_Livingood at cable.comcast.com
Thu Aug 22 12:53:31 UTC 2013


On 8/21/13 11:25 AM, "Warren Kumari" <warren at kumari.net> wrote:

>>>FWIW, I remain opposed to the idea, but trying to do due diligence.
>> I still like the idea as it is the only way for big resolver providers
>>to deploy DNSSEC when there competitors have not.
>
>+lots. Penalizing the early adopters simply leads to no deployment.

+more

Our deployment at Comcast would not have happened without NTAs. I guess it
is time for me to update and work on the DNSOP WG NTA I-D again (been busy
on other stuff).

Jason




More information about the dns-operations mailing list