[Zonemaster-devel] [New-dnscheck] policy change

Sandoche Balakrichenan sandoche.balakrichenan at afnic.fr
Wed Mar 11 15:37:09 UTC 2015


On 03/11/2015 02:19 PM, Patrik Wallström wrote:
> We have had a small change in the test code, which has brought up an issue with the policy we have for those test cases, see this ticket:
> https://github.com/dotse/zonemaster-engine/issues/42
>
> The relevant log messages are:
> DNSSEC:NO_KEYS_OR_NO_SIGS
> DNSSEC:NO_KEYS_OR_NO_SIGS_OR_NO_SOA
> DNSSEC:DELEGATION_NOT_SIGNED
>
> Those are currently set at the ERROR level, which it shouldn’t be. My suggestion is that we lower those log messages to these:
>
> debug: DNSSEC:NO_KEYS_OR_NO_SIGS
> debug: DNSSEC:NO_KEYS_OR_NO_SIGS_OR_NO_SOA
> notice: DNSSEC:DELEGATION_NOT_SIGNED
>
> First, are my suggestions ok? 
==> +1
> How do we decide the change? We have never discussed the process for making changes to the policy - just that the “team” decides.
==> I feel that as of now, the team decides for the default policy. Once
a decision is made, the Release manager does the appropriate modifications.
>
> I would like to perform this change as soon as possible, as this affects all my current measurements.
==> I think you can do it tomorrow morning based on the feedbacks received.

Sandoche.
>
>
> _______________________________________________
> New-dnscheck mailing list
> New-dnscheck at lists.iis.se
> http://lists.iis.se/cgi-bin/mailman/listinfo/new-dnscheck

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.iis.se/pipermail/zonemaster-devel/attachments/20150311/5bf728c0/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <http://lists.iis.se/pipermail/zonemaster-devel/attachments/20150311/5bf728c0/attachment.pgp>


More information about the Zonemaster-devel mailing list