Missing parts in the draft The draft has not considered a class of replay attacks this can be fixed by maintaining state i.e. maintaining a log of previously used trust anchors Thorough analysis of the “client states” what happens if the zone owner does not do what it MUST do, etc |