----- Original Message ----- > From: "Doug Barton" <do...@dougbarton.us>
> Now OTOH if someone wants to demonstrate the value in having a > publication channel for TLD DNSKEYs outside of the root zone, I'm > certainly willing to listen. Just be forewarned that you will have an > uphill battle in trying to prove your case. :) If you do not, then your clients have little hope of spotting insider malfeasance changes, no? Or aren't such changes practical for other reasons which I don't understand, not being a DNSSEC maven? Cheers, -- jra