[ksk-rollover] RFC 8145 interaction with Aggressive DNSSEC cache

[Geoff Huston]

thanks for these responses - I’ll set up a measurement experiment then!

   Geoff


> On 26 Jul 2018, at 5:36 am, Benno Overeinder <benno at NLnetLabs.nl> wrote:
> 
> 
>> Op 25 jul. 2018 om 21:29 heeft Evan Hunt <each at isc.org> het volgende geschreven:
>> 
>>> On Thu, Jul 26, 2018 at 05:08:45AM +1000, Geoff Huston wrote:
>>> I have not launched any tests of the root sentinel method as yet - I was 
>>> waiting to see the fate of the IETF publication process, but is is worth
>>> the question on this list: Which resolver vendors have implemented the 
>>> KSK sentinel and integrated it into deployed resolver code releases?
>> 
>> BIND for one. It's published in all current releases branches (as of 9.9.13,
>> 9.10.8, 9.11.4, 9.12.2, and the 9.13 development branch), and enabled by
>> default.
> 
> And Unbound 1.7.1 (released May 3rd), default enabled.
> 
> -- Benno
> 
> --
> Benno J. Overeinder
> NLnet Labs
> https://www.nlnetlabs.nl/