ICANN ICANN Email List Archives


<<< Chronological Index >>>        Thread Index >>>

Basically OK but a few comments

  • To: comments-root-ksk-06aug15@xxxxxxxxx
  • Subject: Basically OK but a few comments
  • From: Stephane Bortzmeyer <bortzmeyer@xxxxxx>
  • Date: Wed, 26 Aug 2015 11:49:14 +0200

> https://www.icann.org/en/system/files/files/root-zone-ksk-rollover-plan-draft-04aug15-en.pdf

I find the ICANN document basically OK but:

* The "communication plan" seems a bit light. This will be _the_ big
problem since the document clearly says that RFC 5011 and software
updates won't be sufficient.

* Among the testbeds, Yeti <https://yeti-dns.org/> is not mentioned.

* About RFC 5011, the ICANN document mentions the risk of
non-implementation and the risk of bad implementation but not the risk
of bad configuration (for instance, the key in a directory where the
daemon cannot write, something current Unbound and BIND packages do
not handle automatically).

* On the governance side, the document only comes from US
organizations (ICANN, Verisign, NTIA)

<<< Chronological Index >>>        Thread Index >>>

Privacy Policy | Terms of Service | Cookies Policy