Re: Registry lock - setting statuses on hosts

Jaap Akkerhuis <[email protected]> Wed, 16 Oct 2013 07:32:44 +0200

Newsgroups	gmane.ietf.provreg
Message-ID	<[email protected]>

    
    There is a scenario where you hijack the registrar, and change the
    DNSSEC key material at the registry to DOS the victim. Or delete the
    DNSSEC key material so you can do cache pollution.

Having the private key at the domain holder would actually prevent that.

	jaap
_______________________________________________
provreg mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/provreg