[DTL] Notes from DT-L Call on 8 April at 13:00 UTC

Jaap Akkerhuis jaap at NLnetLabs.nl
Fri Apr 10 08:06:02 UTC 2015


 David Conrad writes:

 > As such, the "lighter approach" would
 > probably be preferred (I believe a KSK rollover will have been done long
 > before this process would ever have a chance to be executed).  While
 > swapping out HSMs wouldn't hurt and might improve the trust level a bit, I'=
 > m
 > not sure I see the point given the openness/transparency of how the HSMs ar=
 > e
 > actually used.  I'd think a ceremony in which control of the HSMs and the
 > ceremonies were transferred would be sufficient.

Fully agree.  This approach is what I argued for initially a couple a weeks ago.

	jaap


More information about the dt4 mailing list