This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at https://mailman.ripe.net/archives/list/dns-wg@ripe.net/

[dns-wg] NTIA NoI: does anyone care?

• Previous message (by thread): [dns-wg] NTIA NoI: does anyone care?
• Next message (by thread): [dns-wg] NTIA NoI: does anyone care?

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Paul Wouters paul at xelerance.com
Fri Oct 17 16:52:11 CEST 2008

On Wed, 15 Oct 2008, David Conrad wrote:

> Once more with feeling: the ONLY thing signing the root zone does is to allow
> for the contents of that zone to be validated.  It hides no information.  It
> provides no new mechanisms for subterfuge.

And indeed, anyone can still decide to add or remove trust anchors by configuring
it in your resolver. So country X can decide to use a signed root, while stll
removing country Y effectively from their signed root.


Paul

• Previous message (by thread): [dns-wg] NTIA NoI: does anyone care?
• Next message (by thread): [dns-wg] NTIA NoI: does anyone care?

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

[ dns-wg Archives ]