On 2011-05-13, at 10:06, Paul Vixie wrote: > apropos of authoritativeness, i think it's time to start planning for > dnssec signing of AS112 zones. this would mean using a signing key for > which the "usually secret" part was published. What is the value in signing with a public private key? Joe