[ksk-change] Action #4 - Review Joe Abley's Internet Drafts

Warren Kumari warren at kumari.net
Fri Oct 17 20:55:12 UTC 2014

On Thu, Oct 16, 2014 at 3:23 PM, Dan York <york at isoc.org> wrote:
> Action #4 - There was discussion of two Internet-Drafts that Joe Abley has
> submitted:
> DNSSEC Trust Anchor Publication for the Root Zone
> https://tools.ietf.org/html/draft-jabley-dnssec-trust-anchor-10
> Establishing an Appropriate Root Zone DNSSEC Trust Anchor at Startup
> http://tools.ietf.org/html/draft-jabley-dnsop-validator-bootstrap-00
> (expired back in 2011)
> There are actually two actions here:
> 1.  Joe is going to re-circulate these drafts on relevant IETF lists (and
> presumably update the 2nd one).
> 2. Everyone is urged to review these drafts and send comments/feedback to
> the DNSOP mailing list (if you are subscribed) or directly to Joe (if you
> are not).
> Separately, during the meeting Kumar Ashutosh from Microsoft indicated that
> they have implemented Joe's draft.  Benno Overeinder from NLNet Labs
> indicated that Unbound implements this draft.  Jakob asked on the list if
> there are any other implementations.  (Please send comments to this
> ksk-rollover list.)

echo -n '. '; wget -q -O -
https://data.iana.org/root-anchors/Kjqmt7v.crt | openssl x509 -text
-inform der| grep 'Subject:' | cut -d ' ' -f16- > root.anchor

Now can I have a cookie?

(Needlessly snotty, passive aggressive way of pointing out that the
technique in the draft is simple enough that many folk may be doing
this without an "implementation")


(Sorry, still at ICANN meeting and most of the techies have gone home...)
> Thanks,
> Dan
> --
> Dan York
> Senior Content Strategist, Internet Society
> york at isoc.org   +1-802-735-1624
> Jabber: york at jabber.isoc.org
> Skype: danyork   http://twitter.com/danyork
> http://www.internetsociety.org/deploy360/
> _______________________________________________
> ksk-rollover mailing list
> ksk-rollover at icann.org
> https://mm.icann.org/mailman/listinfo/ksk-rollover

I don't think the execution is relevant when it was obviously a bad
idea in the first place.
This is like putting rabid weasels in your pants, and later expressing
regret at having chosen those particular rabid weasels and that pair
of pants.

More information about the ksk-rollover mailing list