> I'm not making the statistics up; I never claimed you did. But they are, from my perspective, misleading. > registrars that automatically sign domains for

> I'm not making the statistics up; I never claimed you did. But they are, from my perspective, misleading. > registrars that automatically sign domains for customers Like I wrote the very last time I posted my comment two years ago: Registrars can’t “auto-sign” domains. Only DNS server operators can do that, if they have the cooperation of the registrar. And the DNS server operators is the only workable definition of “owners of the zones”, so they do own their keys. It can’t work any other way. In fact, the new CDS and CDNSKEY DNS records allow it to work the other way around; DNS server operators can auto-sign domains, and the registrars need not be involved at all.