[dns-operations] It's begun...

[Peter Koch]

On Thu, Oct 24, 2013 at 01:20:48PM +0000, Dan York wrote:

[1]
> >From a DNSSEC-advocacy point of view, this is a great step forward as all
> new domains registered under these newgTLDs will at least have the
> *option* of being secured by DNSSEC.

[2]
> Hmmm... interesting.  Perhaps some work is still needed on the operational
> front there...

I'm sorry, but these two don't go well together.  Without picking on teething
problems, any such pattern evolving will be detrimental to DNSSEC deployment
in the long run. DNSSEC _is_ an operational matter. Sometimes less is just more.

-Peter