Hi,

On Sun, Nov 09, 2014 at 03:10:31PM -0800, Paul Vixie wrote:

> we intend that iana craft a second root zone, published in parallel with
> the existing one, each being synchronized in terms of tld content, and
> each signed with the then-current iana signing key.
> 
> the second one will only have two NS RR's at its apex, not thirteen.

I didn't understand that, either; I thought what John said was what
you intended.

Doesn't this suffer in terms of robustness?

And isn't there some danger that this "parallel" root becomes an
attractive target for those who want things to be different than
what's in the "official" root?  That is, in effect, isn't this a plain
old alternative root?

A

-- 
Andrew Sullivan
a...@anvilwalrusden.com

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to