Why Donkey?

• There is currently no easy way to publish or update public keys globally (although the PGP key servers come close).

• DNSSEC will not solve this:

  • Meant for host names, not arbitrary names.
  • Updates are slow (propagation through caches, administrative overhead).
  • Limited functionality (DNSSEC is meant to secure DNS zones only).