28 Sep
2004
28 Sep
'04
9:45 a.m.
David Farrar wrote:
I should point out that there is no barrier to signing the .nz zone itself as the contents of that zone are well known and public (only 14 records).
The issue is with signing the 2LDs.
It is possible that in a moderated 2LD such as govt.nz, the 2LD community and moderator might decide that they don't mind their zone file being accessible (as I suspect almost all govt.nz domains are easily found or listed anyway), and one could implement DNSSEC just on that 2LD.
Isn't this what geek.nz was originally for ?[1] [1]: http://troublemaking.geek.nz/doc/geek-implementation-02.html