On Thu, 7 Aug 2014, Phillip Hallam-Baker wrote:
<trans wg cochair hat on>
The reason TRANS does not currently appear to be relevant to the
DNSSEC advocates is that they are simplifying the PKI problem to
exclude consideration of the entire class of attacks that TRANS is
designed to control.
We have had only very preliminairy TRANS DNSSEC discussion so far.
I am not aware of anything being excluded at this point. Some concerns
raised do relate to the sheer size of DNS and what to log and what not
to log to keep the log servers alive.
What do you believe has already been excluded from TRANS with respect to
DNSSEC by DNSSEC advocates?
Paul