> > The problem is that when you have every recursive server in the world with > a copy of the root zone from “random places” you want to reduce the > possible error spaces into manageable chunks when things go wrong which > they will. Being able to verify the contents of the root zone you have are > not modified helps. >
Generaly speaking it is ture for any file replication. But it is not relevent with DNS context. And your arguement of potential privacy issues seems reasonable to me even though I know some cases people intentionaly edit the NS and glue of root zone for preventing privacy leaks :p Davey
_______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
