Jay Ashworth <j...@baylink.com> writes: > ----- Original Message ----- >> From: "Doug Barton" <do...@dougbarton.us> > >> Now OTOH if someone wants to demonstrate the value in having a >> publication channel for TLD DNSKEYs outside of the root zone, I'm >> certainly willing to listen. Just be forewarned that you will have an >> uphill battle in trying to prove your case. :) > > If you do not, then your clients have little hope of spotting insider > malfeasance changes, no? > > Or aren't such changes practical for other reasons which I don't > understand, not being a DNSSEC maven?
Can you provide us a scenario? -r