Paul Vixie wrote: Hi,
> this author isn't in toronto so i'll answer here-- i had not and have > not compared -lee-dnsop-scalingroot- to -ohta-shared-root-. Security consideration section of my draft explains why allowing all the ISPs run their own anycast root servers does not make plain DNS less secure. That is, their is no reason to use DNSSEC for anycast root. Masataka Ohta _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop