On Wed, Oct 15, 2008 at 10:12:17AM +0100, Jim Reid wrote:
So far there has been no discussion on the list about the NTIA proposals about getting the root signed. I would have hoped someone would have said something by now. Sigh.
Over to you....
rough take: #4 is touted as the offical ICANN postion #5 is touted as the offical Verisign postion both ICANN and Verisign are claiming that placing all the zone creation, change and publication should be with the same organization that creates, hold and uses the digital signatures attesting to the integrity of the zone data. in local parlance, this is the functional equivalence of the fox watching the hen house. options #3 and #6 move the key creation & maintainance along w/ the signing of the zone data to a third party. this type of practice is common, where an auditor or notary validates the presented data. option #6 has the attribute of not having any significant real world deployment - the M of N code and operational practice may not be ready for adoption for such a system. So my general leaning is toward #3 - it provides increased diversity/oversight of the process. --bill