[dns-operations] Signing of the ARPA zone

Jay Daley jay at nzrs.net.nz
Mon Mar 22 01:50:53 UTC 2010


On 22/03/2010, at 1:39 PM, Doug Barton wrote:

> I know that historically not all of the roots have served the ARPA zone,
> but I'm wondering if it wouldn't make sense to make them all consistent
> at this point.

I fail to see the value of consistency here when I can see plenty of value in the present inconsistency.  For example, by ensuring that an attack on the ARPA zone does not include all root servers as coincident targets.  If anything, fewer root servers should also be serving the ARPA zone.

Was there a benefit you had in mind or is it just an OCD-like impulse for Internet architecture? ;-) 

Jay

> 
> 
> Doug
> 
> -- 
> 
> 	... and that's just a little bit of history repeating.
> 			-- Propellerheads
> 
> 	Improve the effectiveness of your Internet presence with
> 	a domain name makeover!    http://SupersetSolutions.com/
> 
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations


-- 
Jay Daley
Chief Executive
.nz Registry Services (New Zealand Domain Name Registry Limited)
desk: +64 4 931 6977
mobile: +64 21 678840




More information about the dns-operations mailing list