X-RT-Interface: Web
In-Reply-To: <rt-4.4.1-88210-1518135729-1427.43670-0-0@isc.org>
MIME-Version: 1.0
X-Mailer: MIME-tools 5.508 (Entity 5.508)
X-RT-Original-Encoding: utf-8
Message-ID: <rt-4.4.1-88210-1518135929-907.43670-0-0@isc.org>
Content-Disposition: inline
Content-Transfer-Encoding: binary
References: <RT-Ticket-43670@isc.org>
 <rt-4.2.8-6373-1479354393-838.43670-4-0@isc.org>
 <rt-4.4.1-88210-1518133259-338.43670-4-0@isc.org>
 <20180209002207.GA87529@isc.org>
 <rt-4.4.1-88210-1518135729-1427.43670-0-0@isc.org>
Content-Type: text/plain; charset="utf-8"
RT-Send-CC:
Content-Length: 507

On Thu Feb 08 14:22:09 2018, each@isc.org wrote:
> > ready for review
> 
> I think it might be a good idea for KSK2010 trusted-key, without any other
> keys, to be fatal instead of a warning.  

That would be us defining policy that should belong to the operator.

> As a managed-key can be a warning.
> Maybe add a suggestion to remove it from named.conf and rely on bind.keys?
> 
> I would consider being more verbose in the DLV warnings and saying ISC DLV
> is shut down.
> 
> The code itself is fine.
>