> On Oct 29, 2019, at 20:44, Ben Schwartz <[email protected]> 
> wrote:
> 
> 
> 
> 
> 
> My understanding is that one has no choice but to trust the parent zone, even 
> with DNSSEC. 

One can limit the trust severely, which is what 
https://datatracker.ietf.org/doc/draft-pwouters-powerbind/ does.

Paul


_______________________________________________
dns-privacy mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dns-privacy

Reply via email to