[ksk-rollover] Suggested update to the key ceremonies.

Paul Hoffman paul.hoffman at icann.org
Wed Feb 14 21:35:24 UTC 2018

On Feb 14, 2018, at 12:40 PM, Warren Kumari <warren at kumari.net> wrote:
> I think that it would be a useful addition to the script to ensure
> that, when a new KSK is generated, it does not have the same Key ID as
> any previous KSKs. If is *does* have the same Key ID, it should be
> discarded and a new one generated.

As someone who has to write tools to deal with ICANN's trust anchors, I give this proposal two thumbs up. 

--Paul Hoffman

More information about the ksk-rollover mailing list