[dns-wg] Re: Getting the iana.org trust anchor

On Tue, Oct 28, 2008 at 03:07:30PM +0400, Joao Damas <Joao_Damas@isc.org> wrote a message of 6 lines which said:

Givens the near-future availability of the IANA TAR, where can I get securely obtain the trust anchor for the iana.org zone (or the zone where the TAR will be served from) ?

Do you *need* it? An ITAR signed with PGP with a key signed in key parties at RIPE/OARC/IETF meetings would be sufficient to me. (HTTPS is another solution.) Because the DNSSEC TA of iana.org will not protect you against a Kapela & Pilosov attack :-)