[Dnssec-deployment] Dropping IANA ITAR entries [was: KSK rollover in .cz]

Mark Andrews marka at isc.org
Tue Aug 3 19:16:45 EDT 2010


In the rush to close down the ITAR you are also cutting off all the
validators that don't support RSASHA256.  The ITAR provides a secure
path to learn the trust anchors of the non RSASHA256 signed TLD's
for those validators.

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org


More information about the Dnssec-deployment mailing list