Re: [dns-wg] DNSSEC Policy Development Process

Olaf, Jim, all,

Colleagues, you may recall Olaf posted a proposal to the list a few weeks ago. It was about changes to the in-addr.arpa delegation process to accommodate DNSSEC. In other words, updates to the templates and database to allow for keying material, additional checks at the NCC, etc, etc.

To my eyes the proposal is good and I am happy somebody is taking the plunge. Congratulations. Two comments: http://www.ripe.net/rs/reverse/dnssec/key-maintenance-procedure.html To a layman, the meaning of DLV can't be tracked down. A reference missing? http://www.ripe.net/rs/reverse/dnssec/registry-procedure.html I suggest making the ds-rdata attribute an [inverse key] Best regards, Marcos