Re: [Asrg] Re: 3. Problems with domain keys and with message-body-authenticator

[der Mouse <mouse at Rodents.Montreal.QC.CA>]

>>> TTL won't have to be kept low, as the RRs aren't updated once
>>> published,
>> That is not correct, the zone itself needs to be updated with
>> every message that passed through.  This requires very very low TTL
> Why?  The TTL of existing records has nothing to do with the rate at
> which new records can be added.

Strictly, this is true.  The MINTTL in the SOA needs to be low, to
limit the lifetime of negative cache entries, but there is no reason
why records have to use that TTL - it's just a handy shorthand.

But if you have secondaries, you want the refresh value to be low, and
that is almost a TTL - certainly, making it low raises many of the same
performance issues that using low TTLs does.

Also, it occurs to me that if you send a lot of mail, your SOA serial
number will wrap fairly soon.

/~\ The ASCII				der Mouse
\ / Ribbon Campaign
 X  Against HTML	       mouse at rodents.montreal.qc.ca
/ \ Email!	     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B

_______________________________________________
Asrg mailing list
Asrg at ietf.org
https://www1.ietf.org/mailman/listinfo/asrg