Re: [DNSOP] Signing the root == end of ITAR?

[Chris Thompson <[e-mail]>]

On Oct 7 2009, joao damas wrote:

>On 7 Oct 2009, at 13:35, Jim Reid wrote:
>>
>> On 7 Oct 2009, at 13:13, Roy Arends wrote:
>>
>>> Since a date was announced yesterday (July 1st) for a fully
>>> deployed signed root, can we expect ITAR to Go Away on Januari 1st
>>> 2011 ?
>>
>> Will DLV go away then too?
>>
>DLV doesn't only address the lack of a signed root. In fact I would
>argue that the (un)signed root is the smallest of the problems it
>addresses.

Well, no doubt Jim would *like* it to go away, as I have had his "DLV is evil"
lecture delivered to me on a previous occasion :-)

We have had at least one person from ISC in the past saying they won't be
in any hurry to get rid of dlv.isc.org just because the root is signed.
[I'll try and find the reference(s) if anyone doubts that.] No doubt
they will stop importing the IANA ITAR into it at some stage, though.

There's an interesting technical question about DLV in this context, by
the way. Would a DLV rrset at the apex (e.g. for dlv.isc.org) work as
a substitute for an explicit root zone trust anchor?

-- 
Chris Thompson               University of Cambridge Computing Service,
Email: [e-mail]    New Museums Site, Cambridge CB2 3QH,
Phone: [phone]       United Kingdom.