* Jim Reid: > So what? If the served zones are signed, it simply doesn't matter if > the address of a name server is spoofed or hijacked.
This is only true if the whole DNS tree is signed (and if you don't value query privacy). -- Florian Weimer <fwei...@bfk.de> BFK edv-consulting GmbH http://www.bfk.de/ Kriegsstraße 100 tel: +49-721-96201-1 D-76133 Karlsruhe fax: +49-721-96201-99 _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop