North American Network Operators Group Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical Re: America takes over DNS
On Sun, 1 Apr 2007, David Conrad wrote: > > Hi, > > On Apr 1, 2007, at 6:54 AM, J. Oquendo wrote: > > Summary: > > Confusion resulting from hearsay and extrapolations. > > > The "key-signing key" signs the zone key, which is held by VeriSign. > > Except that the root zone hasn't been signed and there are no plans I > am aware of do so (and I think I'd probably know). In one possible > scenario, VeriSign would hold the zone signing key which would be > signed by the key signing key. Who holds the KSK hasn't been > established. > > However, in reality, nothing would change. Even if the root were to > be signed, who signs it doesn't really matter -- the USG already must > approve any changes made to the root zone. And of course, it can only approve "Willing changes". > > Rgds, > -drc >
|