[ksk-rollover] RFC 8145 interaction with Aggressive DNSSEC cache

[Benno Overeinder]

> Op 25 jul. 2018 om 21:29 heeft Evan Hunt <each at isc.org> het volgende geschreven:
> 
>> On Thu, Jul 26, 2018 at 05:08:45AM +1000, Geoff Huston wrote:
>> I have not launched any tests of the root sentinel method as yet - I was 
>> waiting to see the fate of the IETF publication process, but is is worth
>> the question on this list: Which resolver vendors have implemented the 
>> KSK sentinel and integrated it into deployed resolver code releases?
> 
> BIND for one. It's published in all current releases branches (as of 9.9.13,
> 9.10.8, 9.11.4, 9.12.2, and the 9.13 development branch), and enabled by
> default.

And Unbound 1.7.1 (released May 3rd), default enabled.

-- Benno

--
Benno J. Overeinder
NLnet Labs
https://www.nlnetlabs.nl/