[ksk-rollover] RFC 8145 interaction with Aggressive DNSSEC cache

[Evan Hunt]

On Thu, Jul 26, 2018 at 05:08:45AM +1000, Geoff Huston wrote:
> I have not launched any tests of the root sentinel method as yet - I was 
> waiting to see the fate of the IETF publication process, but is is worth
> the question on this list: Which resolver vendors have implemented the 
> KSK sentinel and integrated it into deployed resolver code releases?

BIND for one. It's published in all current releases branches (as of 9.9.13,
9.10.8, 9.11.4, 9.12.2, and the 9.13 development branch), and enabled by
default.

-- 
Evan Hunt -- each at isc.org
Internet Systems Consortium, Inc.