[Dnssec-deployment] DNSKEY sharing across zones by a registrar

Steingruebl, Andy asteingruebl at paypal-inc.com
Thu Jul 29 19:43:14 EDT 2010


> -----Original Message-----
> From: Jay Daley
> Sent: Thursday, July 29, 2010 4:13 PM
> To: dnssec-deployment at dnssec-deployment.org
> 
> Another question.  If a registrar were to share keys across the zones they
> operate then that would make their life considerably easier, but also increase
> the potential damage from an exploit of that key.  Any thoughts on the
> balance between those two concerns?

There was a good thread previously on this:  http://dnssec-deployment.org/pipermail/dnssec-deployment/2010-March/003704.html

- Andy


More information about the Dnssec-deployment mailing list