Re: [dns-wg] root zone signing

Bill, On Oct 20, 2008, at 11:34 AM, bmanning@vacation.karoshi.com wrote:

perhaps, if one buys into the argument that there is only a single parent.

So, just to be clear, you're arguing the root shouldn't be signed and instead each validating resolver operator should harvest DNSKEYs of all zones that are signed? Couldn't you harvest DNSKEYs regardless of whether the root is signed or not? Thanks, -drc