Eric Ziegast writes:

It's DNS servers, not resolvers, that need to update their lists
of Internet root servers. The problem (IMHO) is that few sites know
or care that they have to maintain root server list periodically to
stay in sync with the rest of the Internet. One way to attack the
problem (not solve it) is to require nameserver vendors (IIS, Apple,
BIND, etc.) to provide the capability for periodic root server list

I hate to say it, but the ftp script you list to do this is
insecure. If I knew for a fact taht you were doing this regularly,
you would be meat on the table.