[ksk-rollover] The risk of miscommunication

Stephane Bortzmeyer bortzmeyer at nic.fr
Mon Jul 25 13:50:59 UTC 2016


The Yeti test bed is currently trying a second KSK rollover
<https://github.com/shane-kerr/Yeti-Project/blob/experiment-kroll/doc/Experiment-KROLL.md>
and there was a funny incident. A resolver admin, misinterpreting the
instructions, updated manually his config with the new key, despite
the fact it was still in AddPend state and not used for signing. Since
people have a tendency to make mistakes, I suggest to pay extreme
attention to the communication and documentation, when explaining
sysadmins what to do.



More information about the ksk-rollover mailing list