Hacker News Reader

The security of these keys depend on the signing ceremony / ritual involved. Here's an example https://www.youtube.com/watch?v=_yIfMUjv-UU

That video deserves its own HN post

I agree, although it's been posted a few times already. In searching, I found a nice, and obligatory CloudFlare article on it: https://www.cloudflare.com/dns/dnssec/root-signing-ceremony/