4 ms·
The DNS root servers need offline signing. Many servers are in untrusted areas (think intervention from local government).
by sdkmvx 11y ago
The DNS root servers need offline signing. Many servers are in untrusted areas (think intervention from local government).
- yuhong 11y agoI think DNSSEC already deals with this by offline signing another key that actually signs the DNS root zone.