[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: nsec++
On Wed, 3 Dec 2003, Peter Koch wrote:
> > i.e., one type of sequence OR another type of sequence. if it allowed
> > mixing, it would probably say:
> >
> > "The Type Bit Map field is represented as a sequence of RR type mnemonics
> > or unsigned decimal integers denoting the RR type codes."
>
> For the sake of consistency with RFC 3597 I'd use the TYPEnnn convention
> and don't see any reason not to allow "mixed" format.
>
> "The Type Bit Map field is represented as a sequence of RR type mnemonics.
> When the mnemonic is not known, the TYPE representation as of section 5
> of [RFC 3597] MUST be used, otherwise it MAY {SHOULD NOT} be used."
I agree, but do not think we need that last part. suggestion:
The List of Type Bit Map(s) Field is represented as a sequence of
RR type mnemonics. When the mnemonic is not known, the TYPE
representation as described in RFC 3597 (section 5) MUST be used.
> 2.0
> The NSEC RR is class independent.
>
> -> The NSEC RR RDATA format is class independent and defined for all
> classes.
> {The RR or the contents of the RR really is class dependent}
updated.
> 2.1.1
>
> Owner names of RRsets not authoritative for the given zone (such as
> glue records) MUST NOT be listed in the Next Domain Name unless at
> least one authoritative RRset exists at the same owner name.
>
> Isn't this already covered by the reference to canonical sort order?
> Anyway, owner names or RRSets are not "authoritative for" the zone
> but are "in" the zone (or not). Section 4 of AXFR clarify, which still hasn't
> made it to RFC, has some wording about this.
>
> If a discussion is appropriate here, the "empty non-leaf node" problem
> could be solved, too. (short: NSEC may point to siblings, children or
> parents, but not to nephews).
as this text was copied from draft-ietf-dnsext-dnssec-records-05.txt, I'd
like comments on this from the editors of that draft before changing
anything.
> 2.1.2
>
> Bits representing pseudo-RR types MUST be set to 0, since they do not
> appear in zone data. If encountered, they must be ignored upon
> reading.
>
> The term "pseudo-RR" needs a definition. Again stealing from 3597 I'd say:
>
> Bits representing Meta-TYPEs or QTYPEs as specified in [RFC 2929]
> (section 3.1) or within the range reserved for assignment only to
> QTYPEs and Meta-TYPEs MUST be set to 0 ...
>
> This may also change the maximum length calculation a bit (although 2929
> doesn't explicitly say that the TYPE reservation is valid for classes
> other than IN), which could be provided in an appendix.
new text included.
jakob
--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>
- References:
- Re: nsec++
- From: Peter Koch <pk@TechFak.Uni-Bielefeld.DE>