DNSSEC Painful for Large Zones

• Upfront cost

  • Null Keys, NXT RR’s and signatures for child zones that are not secure
  • Little initial deployment.

• High generation cost

  • Ordering
  • (re)Signing
  • Distributing

Previous slide

Next slide

Back to first slide

View graphic version