[dns-operations] we may finally have a dnssec use case ; -) Re: Odd behaviour of DNS queries in PRC (facebook, youtube & twitter)

[João Damas]

On 25 Mar 2010, at 16:06, Joe Abley wrote:
>> Control the roots, control the data.
>
> Control the KSK, control the ability to sign the data.

indeed, with signed data, anyone can run a root server and still have  
their users be able to verify data is unaltered. With a little effort  
to keep things in sync and up to date this would make a fine setup.  
Perhaps the root servers will only need to be axfr servers in the  
future.

Joao Damas
Bond Internet Systems SL