[ksk-rollover] RFC 8145 interaction with Aggressive DNSSEC cache

Evan Hunt each at isc.org
Wed Jul 25 19:29:19 UTC 2018

On Thu, Jul 26, 2018 at 05:08:45AM +1000, Geoff Huston wrote:
> I have not launched any tests of the root sentinel method as yet - I was 
> waiting to see the fate of the IETF publication process, but is is worth
> the question on this list: Which resolver vendors have implemented the 
> KSK sentinel and integrated it into deployed resolver code releases?

BIND for one. It's published in all current releases branches (as of 9.9.13,
9.10.8, 9.11.4, 9.12.2, and the 9.13 development branch), and enabled by

Evan Hunt -- each at isc.org
Internet Systems Consortium, Inc.

More information about the ksk-rollover mailing list