Wait, what the fuck? Is this for real?<p>Here&#x27;s the sample code cloudflare posted:<p><pre><code>  foo:~$ cat &#x2F;usr&#x2F;local&#x2F;bin&#x2F;pubkeygrab.sh
  #!&#x2F;bin&#x2F;sh
  
  USER=$1
  
  &#x2F;usr&#x2F;sbin&#x2F;unbound-host -v -D -t TXT ${USER}_pubkey.example.com \\
       | &#x2F;usr&#x2F;bin&#x2F;grep -v &quot;no TXT record&quot; \\
       | &#x2F;usr&#x2F;bin&#x2F;grep &#x27; (secure)&#x27; \\
       | &#x2F;usr&#x2F;bin&#x2F;sed &#x27;s&#x2F;.* &quot;\(.*\)&quot; (secure)&#x2F;\1&#x2F;&#x27;

</code></pre>
They aren&#x27;t actually doing any authentication besides DNSSEC , giving the people managing the TLD and your registrar root access to your server doesn&#x27;t seem like such a good idea.<p>I seriously hope I&#x27;m missing something here, but with cloudflares security track record that seems pretty unlikely.<p>Edit: Made the mistake of assuming that grep was actually supposed to do something here, it doesn&#x27;t actually do anything at all.