An Interim Scheme for Signing the Public DNS Root, Johan Ihren, Autonomica

Synopsis

This is a proposal for transitioning from an unsigned DNS root to a 
signed root where the data will be signed by DNSSEC signatures.

The underlying reason for signing the root is to be able to provide 
a more secure DNS hierarchy, where it is possible to distinguish false 
answers from correct answers. For the special case of the DNS root zone, 
an interim scheme is proposed. This scheme is mostly aimed at securing 
the root zone itself for technical and operational reasons, and to give 
operational experience of DNSSEC.