[ksk-rollover] The risk of miscommunication

Stephane Bortzmeyer bortzmeyer at nic.fr
Mon Jul 25 13:50:59 UTC 2016

The Yeti test bed is currently trying a second KSK rollover
and there was a funny incident. A resolver admin, misinterpreting the
instructions, updated manually his config with the new key, despite
the fact it was still in AddPend state and not used for signing. Since
people have a tendency to make mistakes, I suggest to pay extreme
attention to the communication and documentation, when explaining
sysadmins what to do.

More information about the ksk-rollover mailing list