Internet Governance Project (IGP)
Twitter
Year Archive
Login
User name:
Password:
Remember me 
Re: Response to Patrik Faltstrom on DNSSEC implications
by Anonymous
Absolutely nothing stops parties that want to use a different root to do so. Signed or unsigned. If DNSSEC is added to DNS, then of course the other root will also be signed with DNSSEC. We will still get multiple roots, a split DNS, with the only difference that they both are signed. This because the way DNSSEC is deployed today (and there is no change in sight in near future), the verification of the signatures are made in the same full service resolver that is "choosing" what root (zone) to use. This implies if you want to use a different root today, you change the IP address(es) for the root servers. When using DNSSEC you change the IP address(es) and the public key(s) for this other root. So DNSSEC doesn't change this at all.
Post comment:
Format Type: 
  Convert newlines
  Receive comment notifications for this article
Subject: 
   
insert bold tags insert italic tags insert underline tags insert strikethough tags insert link insert blockquote tags
Comment: 
Comment verification:

Please enter the text you see inside the graphic to post your comment:
This blog does not allow anonymous comments. Please provide your username and password along with your comment.
Login information:
Username: 
Password: 
If you would like to post contact information on your comment, please enter your information into the optional fields below:
Contact information:
URL:  example: http://yourdomain.com
   
Help support our work
What we're reading
Upcoming Events
View all Events
Who's Reading IGP Blog?