[dns-operations] .Org DNSSEC key management policy feedback
drc at virtualized.org
Sun Jun 21 14:50:47 UTC 2009
On Jun 20, 2009, at 11:38 PM, George Barwood wrote:
> (2) "the public will need to update their validating resolvers with
> the new public portion of the .ORG zone key."
> Surely not? Won't the .ORG DS record be published by IANA?
Yes, but until the root is signed, people will still need to update
their trust anchors to reflect all the islands of trust, including the
TLDs, they want to validated.
More information about the dns-operations