Why DNSSEC on in-addr
Delegations follow topology
- Allocation/assignment can be used to verify child’s key authority
- First (proposed) applications use reverse tree (IP-SEC)
-
RIPE NCC is authoritative for top nodes of the tree.
- We can gain experience and may make a difference