[Opendnssec-develop] Fwd: Minutes and Actions from RIPE 66

Rick van Rein (OpenFortress) rick at openfortress.nl
Tue May 21 05:57:26 UTC 2013

Hey Sara and others,

> The minutes from the developers workshop are also available for review:


Textual: Should "a minor version bump (to 1.5) under the new policy" be "…under the current policy"?

On the contents: It's a pitty that the version policy doesn't state "when the same options are used, the new feature must not lead to different behaviour".  Shouldn't that have been part of the solution?

On the contents of views:  The uniqueness of zone names may well be assumed "at a low level in the code", but note that no implications follow from it; specifically, I doubt if it is assumed that the string represents a DNS zone.  It should be possible to introduce a special format that is the functional equivalent of the <zone,view> tuple that should replace the zone name string, for instance "openfortress.nl at internal" -- all that seems to be required is that the signer strips off this "@" part when generating signatures and files.  Surrounding tooling should setup such a view in a different in/out location, of course.


More information about the Opendnssec-develop mailing list