> 2) Legitimate domain owners can't recover from key loss
That doesn't seem like an insurmountable obstacle to me. You could devise a scheme where there's the option of a majority of multiple offline backup keys can be used to invalidate and replace the current online key.
Then it's up to the legitimate owner whether the domain is valuable enough to do that kind of key management and backup.
That doesn't seem like an insurmountable obstacle to me. You could devise a scheme where there's the option of a majority of multiple offline backup keys can be used to invalidate and replace the current online key.
Then it's up to the legitimate owner whether the domain is valuable enough to do that kind of key management and backup.