6 Nov
2008
6 Nov
'08
10:35 a.m.
On Nov 6, 2008, at 11:06, Florian Weimer wrote:
In both cases, I don't quite see what the statement is supposed to mean. Does it advise against the introduction of yet another layer of indirection, by requiring that the organization which makes the final, technical content decision on the root zone (the "generator") also creates the digital signatures?
It means whoever churns out the zone file for the root should also generate the RRSIGs for the signed version => having access to the ZSK.