[dns-wg] NTIA NoI: does anyone care?
Paul Wouters paul at xelerance.com
Fri Oct 17 16:52:11 CEST 2008
On Wed, 15 Oct 2008, David Conrad wrote: > Once more with feeling: the ONLY thing signing the root zone does is to allow > for the contents of that zone to be validated. It hides no information. It > provides no new mechanisms for subterfuge. And indeed, anyone can still decide to add or remove trust anchors by configuring it in your resolver. So country X can decide to use a signed root, while stll removing country Y effectively from their signed root. Paul
[ dns-wg Archives ]