[ksk-rollover] Post IETF - determining 5011 support - part 1

[PASZTOR Miklos]

On 18-11-12 12:55, Michael StJohns wrote:

>1) Assume that non-5011 entities silently ignore the revoke bit


I suppose that modern resolvers do honor 5011 (e.g. revoke bits) even if there
are static anchors in their configuration. So you may want also assume that
those resolvers have (in Unbound lingo) 'auto-trust-anchor-files' configured
and *not* 'trust-anchor-files'.

Miklós
--
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <http://mm.icann.org/pipermail/ksk-rollover/attachments/20181113/3147d48f/signature.asc>