[dns-operations] we may finally have a dnssec use case ; -) Re: Odd behaviour of DNS queries in PRC (facebook, youtube & twitter)
João Damas
joao at bondis.org
Thu Mar 25 23:50:45 UTC 2010
On 25 Mar 2010, at 16:06, Joe Abley wrote:
>> Control the roots, control the data.
>
> Control the KSK, control the ability to sign the data.
indeed, with signed data, anyone can run a root server and still have
their users be able to verify data is unaltered. With a little effort
to keep things in sync and up to date this would make a fine setup.
Perhaps the root servers will only need to be axfr servers in the
future.
Joao Damas
Bond Internet Systems SL
More information about the dns-operations
mailing list