[as112-ops] DNSSEC?

[Marco Davids]

Op 8-1-2010 10:30, schreef Shane Kerr:

>> I was wondering: are there any plans to deploy DNSSEC on the AS112
>> served zones in the future, including 'hostname.as112.net' itself?

>> (would it have added value to do so?)

> Seriously though, I don't see much added value

My reason for asking was: appearantly quite a number of DNS-queries end
up on the AS112 nameservers, resulting in a reply. Could a bad person
take advantage of that, by returning spoofed answers to those queries?
If such an 'attack' is conceivable, than it might make sense to sign the
AS112 zones as well.

(very theoretic scenario, I agree)

-- 
Marco