This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at https://mailman.ripe.net/archives/list/[email protected]/

[dns-wg] root zone signing

• Previous message (by thread): [dns-wg] root zone signing
• Next message (by thread): [dns-wg] root zone signing

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

David Conrad drc at virtualized.org
Tue Oct 21 00:50:46 CEST 2008

Bill,

On Oct 20, 2008, at 11:34 AM, bmanning at vacation.karoshi.com wrote:
> 	perhaps, if one buys into the argument that there is only a
> 	single parent.

So, just to be clear, you're arguing the root shouldn't be signed and  
instead each validating resolver operator should harvest DNSKEYs of  
all zones that are signed?

Couldn't you harvest DNSKEYs regardless of whether the root is signed  
or not?

Thanks,
-drc

• Previous message (by thread): [dns-wg] root zone signing
• Next message (by thread): [dns-wg] root zone signing

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

[ dns-wg Archives ]