Re: Blocking International DNS

[Randy Bush <randy () psg com>]

the more i think about this, the more i am inclined to consider a second
trusted root not (easily) attackable by the usg, who owns the root now,
or the acta vigilantes.  as dissent becomes less tolerated, let alone
supported, we may want to attempt to ensure it in our deployments.

randy