[dns-wg] Re: DNSSEC - DS RR provisioning

Sat Nov 14 02:52:00 CET 2009

On Fri, Nov 13, 2009 at 05:57:36PM -0500,
 Paul Wouters <paul at xelerance.com> wrote 
 a message of 15 lines which said:

> Only if you're willing to wait 2 years on .com to get signed.

If you have a ".com", you will need to wait for ".com" to be signed +
for ".com" to accept DS records (for most TLD which were signed, there
was a non-trivial delay here) + for your registrar to accept and relay
DS records (the experience with AAAA glue records makes me pessimistic
here).

So, yes, saying we won't need DLV after the root is signed is
short-sighted.