[ksk-change] Which style of rollover were people thinking of?

Paul Hoffman paul.hoffman at vpnc.org
Tue Oct 7 20:41:34 UTC 2014


Greetings again. Assuming that we are still thinking of doing a KSK rollover, what style of rollover were people thinking of? draft-ietf-dnsop-dnssec-key-timing-05 describes described three. Of course, there is no DS record here, but the DS's moral equivalent is the manually trusted key(s) in the validating resolvers.

--Paul Hoffman


More information about the ksk-rollover mailing list