On Thu, Feb 14, 2019 at 04:58:38PM +0800, zuop...@cnnic.cn <zuop...@cnnic.cn> wrote a message of 126 lines which said:
> if an DNSSEC_enabled authotative server(no matter it is Alice or > Bob) is evil and modifies DNS records, it will succeed because it > has private key It is completely false. (You seem to think that online signing is the only possibility but this is far from true.) _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
