On Sun, 1 Feb 2026, Erik Nygren wrote:
We've published a -11 version
of draft-ietf-dnsop-domain-verification-techniques with the hope that this
is close to ready for another WGLC.

This is considerably better.  A few suggestions:

6.1.1 says "If multiple Application Service Providers are using the same Validation Record name then the Unique Token MUST be constructed in a way that prevents collisions." Why would they need to do that? If they register different _prefix names, which is basically free, the risk of collision goes away, so say that.

Section 9.3 seems to say that there is something wrong with subcontracting a service. I see no reason to assume that. So long as the customer gets the service, who cares what the provider's internal business model is? I'd delete the entire section.

Regards,
John Levine, [email protected], Primary Perpetrator of "The Internet for Dummies",
Please consider the environment before reading this e-mail. https://jl.ly

_______________________________________________
DNSOP mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to