[ietf-provreg] DNSSEC EPP Extension (RFC 4310) Usability Question

[James Gould <jgould@verisign.com>]

Title: DNSSEC EPP Extension (RFC 4310) Usability Question

In reviewing the DNSSEC EPP Extension (RFC 4310) I noticed one usability issue that I would like to get feedback from the existing implementations of the extension.  

The specification allows adding (<secDNS:add>), removing (<secDNS:rem>), and changing (<secDNS:chg>) DS data, but according to the XML schema they can’t be done at the same time.  Below is from the RFC 4210 XML schema for the <secDNS:update>:

     <complexType name="updateType">
       <choice>
         <element name="add" type="secDNS:dsType"/>
         <element name="chg" type="secDNS:dsType"/>
         <element name="rem" type="secDNS:remType"/>
       </choice>
       <attribute name="urgent" type="boolean" default="false"/>
     </complexType>
 
To allow for a mix of add, chg, and rem, should the XML schema model in the Domain Mapping (RFC 4931) updateType XML schema definition be used?  I updated the DNSSEC XML schema below to match the definition of the Domain Mapping, to support the mix of add, chg, and rem:

      <complexType name="updateType">
       <sequence>
         <element name="add" type="secDNS:dsType" minOccurs=”0” />
         <element name="chg" type="secDNS:dsType" minOccurs=”0” />
         <element name="rem" type="secDNS:remType" minOccurs=”0” />
       </sequence>
       <attribute name="urgent" type="boolean" default="false"/>
     </complexType>
 
Has any of the current implementations come across this issue?  

-- 


JG 

-------------------------------------------------------
James F. Gould
Principal Software Engineer
VeriSign Naming Services
jgould@verisign.com
Direct: 703.948.3271
Mobile: 703.628.7063

 
21345 Ridgetop Circle
LS2-2-1
Dulles, VA 20166

Notice to Recipient:  This e-mail contains confidential, proprietary and/or Registry  Sensitive information intended solely for the recipient and, thus may not be  retransmitted, reproduced or disclosed without the prior written consent of  VeriSign Naming and Directory Services.  If you have received  this e-mail message in error, please notify the sender immediately by  telephone or reply e-mail and destroy the original message without making a  copy.  Thank you.