[gtld-tech] Delegated strings: WHOIS & SLAs...

[Jay Daley]

On 21/11/2013, at 6:25 pm, Jay Daley <jay at nzrs.net.nz> wrote:

>> The standard Appendix A in the gTLD Registry Agreement states that other
>> records can be added, once an RSEP evaluation has taken place "to
>> determine whether the service would create a risk of a meaningful
>> adverse impact on security or stability of the DNS".
> 
> Took me a long time to find this (section 2.2.3.3 of the Applicant Guidebook, can't find any appendix so please send if it is different) and that is very clearly about records at the apex.  We are not talking about a record at the apex.

Sorry, I take that back.  It depends on how you interpret it.  The text is:

> ICANN receives a number of inquiries about use of various record types in a registry zone, as entities contemplate different business and technical models. Permissible zone contents for a TLD zone are:
> 
> 	• Apex SOA record.
> 
> 	• Apex NS records and in-bailiwick glue for the TLD’s DNS servers.
> 
> 	• NS records and in-bailiwick glue for DNS servers of registered names in the TLD.
> 
> 	• DS records for registered names in the TLD.
> 
> 	• Records associated with signing the TLD zone (i.e.,
> 
> RRSIG, DNSKEY, NSEC, and NSEC3).
> 
> An applicant wishing to place any other record types into its TLD zone should describe in detail its proposal in the registry services section of the application. This will be evaluated and could result in an extended evaluation to determine whether the service would create a risk of a meaningful adverse impact on security or stability of the DNS. Applicants should be aware that a service based on use of less-common DNS resource records in the TLD zone, even if approved in the registry services review, might not work as intended for all users due to lack of application support.

Jay

-- 
Jay Daley
Chief Executive
.nz Registry Services (New Zealand Domain Name Registry Limited)
desk: +64 4 931 6977
mobile: +64 21 678840
linkedin: www.linkedin.com/in/jaydaley