[afnog] Signing root zone

[Stephane Bortzmeyer]

On Thu, Nov 06, 2008 at 05:00:57PM +0300,
 McTim <dogwallah at gmail.com> wrote 
 a message of 55 lines which said:

> BTW gmail.com isn't resolvable with a DNSSEC enabled resolver
> either, 

Why do you say so? It works perfectly ("provably insecure" in RFC
parlance). 

% dig +dnssec MX gmail.com 
...
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25359
;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 4, ADDITIONAL: 1
...
;; ANSWER SECTION:
gmail.com.              3565    IN      MX      10 alt1.gmail-smtp-in.l.google.com.