[discuss] A final revision of Problem Statement No. 1?

Jeanette Hofmann jeanette at wzb.eu
Sat Feb 15 21:37:24 UTC 2014


  David, can you elaborate as to  how you would see these 3 tasks being 
organizationally seperated from each other?

> Also, it is worth noting that "implement" is actually 3 separable tasks:
>
> a) edit the root zone data
> b) DNSSEC-sign the root zone data
> c) make the edited and DNSSEC-signed data available for the root servers
> to serve
>
> As I've mentioned in the past, having all three of these tasks performed
> by a single entity is (IMHO) a vulnerability/bug that has bitten us before.

thanks, jeanette





More information about the discuss mailing list