DNS Security Changes
Registrar/Registry split means that client has to go through registrar to have registry to sign.
Steps:
- Registrar needs to identify the domain holder and selects key that they desire to have signed with)
- Registrar identifies itself with the registry
- Verify that domain is with registrar
- Signs domain public key
- Signed key is returned to domain holder