Embed Notice

@briansullivan I mean in how delegations, TLDs, root, etc. work.

There are multiple very different (in terms of how hostile to the international community they would be) possible physical attacks by US gov on DNS:

- Seizing US-based registrars and altering customer records.
- Seizing authority over US-based TLDs and altering contents.
- Seizing authority over non-US TLDs whose infrastructure is hosted in the US and altering contents.
- Seizing DNS root keys and using them to sign fraudulent delegations for non-US TLDs under keys US gov controls.
- etc.