[ksk-rollover] Suggested update to the key ceremonies.

Erwin Lansing erwin at dk-hostmaster.dk
Thu Feb 15 15:43:27 UTC 2018



> On 15 Feb 2018, at 12.08, Jakob Schlyter <jakob at kirei.se> wrote:
> 
>> On 2018-02-14 at 21:40, Warren Kumari wrote:
>> 
>> I think that it would be a useful addition to the script to ensure
>> that, when a new KSK is generated, it does not have the same Key ID as
>> any previous KSKs. It is *does* have the same Key ID, it should be
>> discarded and a new one generated.
> 
> I agree. This has always been my assumption, but it seems it has not been formalized.
> 

+1

Erwin


More information about the ksk-rollover mailing list