On Aug 12, 2008, at 6:56 PM, Dean Anderson wrote:

This message seems to answer many of the questions over the last few
days.


.SE have 922 domains with DS records. The lack of .COM domains is probably because .COM is not signed. It is much easier to put a trust anchor in your resolver for .SE than to put 70 million trust anchors for all .COM domains. I for one is looking forward to what .ORG will do to the uplift on signed .ORG domains.

And .SE does not even care about confidentiality, you should probably not store things in DNS that are supposed to be secret to begin with.

--
patrik_wallstrom->foodfight->[EMAIL PROTECTED]>+46-733173956

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to