[afnog] first signed root zone

[Phil Regnauld]

Walubengo J (jwalu) writes:
> Alain,
> 
> nice to know. jst a quick qtn.  Of what value (security-wise) would be a signed root server in relation to the many unsigned anycast (root) servers accross the globe? 
> 
> In other words, if the anycast server in Kenya is unsigned and it is handling my dns requests, then i dont get to benefit from the remote signed root server (right?)

	Hi Walu,

	All anycast instaces of all root servers are expected to be
	serving a signed copy of the root with a serial of 2010071501,
	at the time of writing.

	They may not all be up to date yet, but I doubt it.

	Cheers,
	Phil