[ksk-rollover] Suggested update to the key ceremonies.

wfms at wfms.org wfms at wfms.org
Fri Feb 16 20:04:46 UTC 2018


On Wed, 14 Feb 2018, Warren Kumari wrote:

> I think that it would be a useful addition to the script to ensure
> that, when a new KSK is generated, it does not have the same Key ID as
> any previous KSKs. It is *does* have the same Key ID, it should be
> discarded and a new one generated.

I think this is a useful thing to have, and perhaps infers that a database 
of previously used keys be kept.  Likely public as well for future 
reference?

William


More information about the ksk-rollover mailing list