George Michaelson <g...@algebras.org> wrote: > Given the behaviour of unknown algorithm, if the anycast node signs with an > algoritm they can guarantee you don't understand, how did you know DNSSEC > was turned off silently?
Because your trust anchor says the root zone MUST be signed with a particular key. Tony. -- f.anthony.n.finch <d...@dotat.at> http://dotat.at/ Fisher, German Bight: South 4 or 5, backing southeast 5 to 7, perhaps gale 8 later. Slight or moderate, becoming moderate or rough. Showers later. Good becoming moderate or poor. _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
