-----Original Message----- From: bmanning(a)vacation.karoshi.com [mailto:bmanning(a)vacation.karoshi.com] Sent: Wednesday, 29 September 2004 2:02 p.m. To: David Farrar Cc: 'NZ NOG' Subject: Re: [nznog] ns1,2,3,5.dns.net.nz hot being helpful
patches will have to go through the IETF and have code written... there will likely be a several year wait for such to be visable. meanwhile, the number of zones protected by DNSSEC will grow. --- he sez looking into his crystal ball... :)
I should point out that there is no barrier to signing the .nz zone itself as the contents of that zone are well known and public (only 14 records). The issue is with signing the 2LDs. It is possible that in a moderated 2LD such as govt.nz, the 2LD community and moderator might decide that they don't mind their zone file being accessible (as I suspect almost all govt.nz domains are easily found or listed anyway), and one could implement DNSSEC just on that 2LD. DPF