[dns-operations] Online DNSSEC debugging tool now availalbe

David Conrad drc at virtualized.org
Tue Jul 20 17:22:22 UTC 2010


Bill,
> 	well, as Ed pointed out, DNSSEC was designed with the idea that there would be "islands
> 	of trust" - that the myth of a fully signed/linked heirarchy was just that. 

I always thought islands of trust was a transition model.  Live and learn.

> 	When I get a set of crypto tokens from my employer, including a SEP for their domain,
> 	I expect they want me to use that key in preference to a chain of custody from one
> 	or more third parties.  

Seems like pointless make work much more prone to entropy and which won't scale to me, but what do I know.

Regards,
-drc




More information about the dns-operations mailing list