[Yeti DNS Discuss] A proposal of preserving IANA NSEC Chain and ZSK RRSIGs

Stephane Bortzmeyer bortzmeyer at nic.fr
Tue Aug 22 13:38:03 UTC 2017


On Tue, Aug 22, 2017 at 05:53:11PM +0800,
 Davey Song <ljsong at biigroup.cn> wrote 
 a message of 145 lines which said:

> I just made a post as a proposal of Yeti experiment by Preserving IANA NSEC
> Chain and ZSK RRSIGs in Yeti root zone.
> http://yeti-dns.org/yeti/blog/2017/08/22/Preserving-IANA-NSEC-Chain-and-ZSK-RRSIGs.html

I'm skeptical that it will convince the people who are nervous enough
to think that Yeti threatens the security and stability of the
Internet. After all, the resolvers will have to use the Yeti
trust anchor and, therefore, Yeti would still be in position to do
everything.

But it is a nice technical test, so I support it.





More information about the discuss mailing list