[ksk-rollover] Post IETF - determining 5011 support - part 1

PASZTOR Miklos pasztor at nic.hu
Tue Nov 13 10:19:08 UTC 2018

On 18-11-12 12:55, Michael StJohns wrote:

>1) Assume that non-5011 entities silently ignore the revoke bit

I suppose that modern resolvers do honor 5011 (e.g. revoke bits) even if there
are static anchors in their configuration. So you may want also assume that
those resolvers have (in Unbound lingo) 'auto-trust-anchor-files' configured
and *not* 'trust-anchor-files'.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <http://mm.icann.org/pipermail/ksk-rollover/attachments/20181113/3147d48f/signature.asc>

More information about the ksk-rollover mailing list