[dns-operations] Online DNSSEC debugging tool now availalbe
David Conrad
drc at virtualized.org
Tue Jul 20 17:22:22 UTC 2010
Bill,
> well, as Ed pointed out, DNSSEC was designed with the idea that there would be "islands
> of trust" - that the myth of a fully signed/linked heirarchy was just that.
I always thought islands of trust was a transition model. Live and learn.
> When I get a set of crypto tokens from my employer, including a SEP for their domain,
> I expect they want me to use that key in preference to a chain of custody from one
> or more third parties.
Seems like pointless make work much more prone to entropy and which won't scale to me, but what do I know.
Regards,
-drc
More information about the dns-operations
mailing list