[Opendnssec-develop] Re: Enforcer

[John Dickinson]

Thanks for the comments. I like Jakob's idea of ZoneGroups and unless  
someone has a better suggestion then I plan to add that to the schema.

I have been getting to grips with Stephen's KSM code to see how it  
might be used in OpenDNSSEC. I really like it.

Here are a few diagrams that summarize how I think KSM fits together.  
Stephen - please shout if it is wrong?

http://www.opendnssec.com/browser/docs/KSM.pdf?format=raw
http://www.opendnssec.com/browser/docs/KSMCreateKey.pdf?format=raw
http://www.opendnssec.com/browser/docs/KSMDeleteKey.pdf?format=raw

This is how I imagine integrating it into the first version of the  
enforcer:

http://www.opendnssec.com/browser/docs/Enforcer.pdf?format=raw
http://www.opendnssec.com/browser/docs/osdKeys.pdf?format=raw

Any thoughts?

Thanks
John