[dns-operations] we may finally have a dnssec use case ; -) Re: Odd behaviour of DNS queries in PRC (facebook, youtube & twitter)

João Damas joao at bondis.org
Fri Mar 26 00:03:12 UTC 2010

On 25 Mar 2010, at 16:06, Joe Abley wrote:
>> Control the roots, control the data.
> Control the KSK, control the ability to sign the data.

indeed, with signed data, anyone can run a root server and still have  
their users be able to verify data is unaltered. With a little effort  
to keep things in sync and up to date this would make a fine setup.  
Perhaps the root servers will only need to be axfr servers in the  

Joao Damas
Bond Internet Systems SL

More information about the dns-operations mailing list