On 28 Sep 2004, at 22:35, David Farrar wrote:
It is possible that in a moderated 2LD such as govt.nz, the 2LD community and moderator might decide that they don't mind their zone file being accessible (as I suspect almost all govt.nz domains are easily found or listed anyway), and one could implement DNSSEC just on that 2LD.
I suspect almost all co.nz, org.nz, gen.nz, etc zones are just as easy to find as the zones under govt.nz. I don't really understand why you've singled out govt.nz for special treatment in this thought experiment. However, it sounds very much like the .nz manager has already made up its mind on this regardless of the opinions of anybody here, so there doesn't seem to be much point in throwing any more logic at the policy. (And to all the people who sent me private mail saying "but what about geek.nz? That's going to be signed, because that's what it was created for." Yeah, that's what I thought too. Apparently not.) Joe