{"action":"created","issue":{"url":"https://api.github.com/repos/wkumari/draft-livingood-dnsop-negative-trust-anchors/issues/9","labels_url":"https://api.github.com/repos/wkumari/draft-livingood-dnsop-negative-trust-anchors/issues/9/labels{/name}","comments_url":"https://api.github.com/repos/wkumari/draft-livingood-dnsop-negative-trust-anchors/issues/9/comments","events_url":"https://api.github.com/repos/wkumari/draft-livingood-dnsop-negative-trust-anchors/issues/9/events","html_url":"https://github.com/wkumari/draft-livingood-dnsop-negative-trust-anchors/issues/9","id":44573653,"number":9,"title":"Setting the tone (Ed Lewis)","user":{"login":"wkumari","id":4615644,"avatar_url":"https://avatars.githubusercontent.com/u/4615644?v=3","gravatar_id":"","url":"https://api.github.com/users/wkumari","html_url":"https://github.com/wkumari","followers_url":"https://api.github.com/users/wkumari/followers","following_url":"https://api.github.com/users/wkumari/following{/other_user}","gists_url":"https://api.github.com/users/wkumari/gists{/gist_id}","starred_url":"https://api.github.com/users/wkumari/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wkumari/subscriptions","organizations_url":"https://api.github.com/users/wkumari/orgs","repos_url":"https://api.github.com/users/wkumari/repos","events_url":"https://api.github.com/users/wkumari/events{/privacy}","received_events_url":"https://api.github.com/users/wkumari/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2014-10-01T15:02:08Z","updated_at":"2015-03-04T20:11:09Z","closed_at":"2015-03-04T20:11:09Z","body":"**Copied from draft**\r\nReference and text per Ed Lewis: One thing that seems to need\r\n   repeating from time to time is this passage in RFC 4033.  ... In the\r\n   final analysis, however, authenticating both DNS keys and data is a\r\n   matter of local policy, which may extend or even override the\r\n   protocol extensions defined in this document set.  See Section 5 for\r\n   further discussion.  A responsibility (one of many) of a caching\r\n   server operator is to \"protect the integrity of the cache.\"  DNSSEC\r\n   is just a tool to help accomplish that.  It carries ancillary data\r\n   that a local cache administrator may use to filter out undesired\r\n   responses.  DNSSEC is not an enforcement mechanism, it's a resource.\r\n   When I see folks voice opinions that DNSSEC's recommended operation\r\n   has to strictly followed, my gut reaction is that these folks have\r\n   forgotten the purpose of all of our efforts.  We don't secure\r\n   protocols to make things work better.  We don't operate the DNS\r\n   because we like to run a well run machine.  We don't run the Internet\r\n   for the fun of it.  (Some might enjoy running it, that's job\r\n   satisfaction to some extent.)  At the end of the day all that matters\r\n   is that what is being done benefits society.  We run the Internet to\r\n   enrich society.  We prefer a well run DNS because it saps less\r\n   resources than a poorly run DNS.  We prefer secure protocols so that\r\n   people don't become victims (in some sense of the word).  Make it\r\n   work.  Do what it takes to make it work.  \"Local policy\" rules."},"comment":{"url":"https://api.github.com/repos/wkumari/draft-livingood-dnsop-negative-trust-anchors/issues/comments/77236287","html_url":"https://github.com/wkumari/draft-livingood-dnsop-negative-trust-anchors/issues/9#issuecomment-77236287","issue_url":"https://api.github.com/repos/wkumari/draft-livingood-dnsop-negative-trust-anchors/issues/9","id":77236287,"user":{"login":"wkumari","id":4615644,"avatar_url":"https://avatars.githubusercontent.com/u/4615644?v=3","gravatar_id":"","url":"https://api.github.com/users/wkumari","html_url":"https://github.com/wkumari","followers_url":"https://api.github.com/users/wkumari/followers","following_url":"https://api.github.com/users/wkumari/following{/other_user}","gists_url":"https://api.github.com/users/wkumari/gists{/gist_id}","starred_url":"https://api.github.com/users/wkumari/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wkumari/subscriptions","organizations_url":"https://api.github.com/users/wkumari/orgs","repos_url":"https://api.github.com/users/wkumari/repos","events_url":"https://api.github.com/users/wkumari/events{/privacy}","received_events_url":"https://api.github.com/users/wkumari/received_events","type":"User","site_admin":false},"created_at":"2015-03-04T20:11:08Z","updated_at":"2015-03-04T20:11:08Z","body":"Duplicate issue. Resolved by taking much of this text."}}