[dns-operations] why root-servers only sign DNSKEY(257) RRSIG ?

[Anand Buddhdev]

Because it's the most reasonable way to sign a zone.

Anand

On 27/11/2017 10:15, Champion Xie wrote:

> ;; ANSWER SECTION:
> . 172800 IN* DNSKEY 257 *3 8 (
> AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTO

...
[snip]
...