Remember that some day (hopefully sooner rather than later) this zone is going
to be signed, most likely with a working key signed against a static metakey.
Every time the working key changes, every SIG in the zone changes, so there
will be much more to the root zone in the future. I don't think anyone has an
answer on how long the working keys last, but it might be something like
monthly.
I don't think this changes the anycast stuff in any way, but it does change
the significance of coherence of the slaves (expired SIGs on an authoratative
root server would be 'a bad thing.') Perhaps there should be something that
takes a server offline if a zone transfer hasn't happened and the SIGs are
close to expiry time. This is just as true for old style servers.
I had been thinking about a requirement for external monitoring of any server
that wants to join the root set. It would be an interesting project and I
would be willing to contribute time to making that happen. A web site that
everyone knows where to go to look at the root server set structure could go a
good way towards mitigating the confusion factor of anycast.
jerry
