DNS Scaling issues

Milton L Mueller mueller at SYR.EDU
Tue Oct 27 16:26:04 CET 2009


________________________________________
From: Jorge Amodio [jmamodio at gmail.com]

>DNSSEC is not a magic solution and it's only one of the tools to start building
>a more secure infrastructure, and as McTim said just signing the TLDs don't
>do it, since the "chain of trust" starts from the root.

It doesn't have to start from the root. There can be a Trust Anchor Repository instead. DNSSEC has already been implemented by several ccTLDs and .org


More information about the Ncuc-discuss mailing list