[ksk-change] Changing a KSK without RFC 5011

Paul Hoffman paul.hoffman at vpnc.org
Mon Sep 22 19:14:49 UTC 2014


On Sep 22, 2014, at 10:25 AM, Michael StJohns <msj at nthpermutation.com> wrote:

> Chaos ensues.

Or out of band works fine. One of the purposes of this workshop is to work out how such a key change can happen. RFC 5011 is one way that has been brought up; out of band updates is another.

--Paul Hoffman


More information about the ksk-rollover mailing list