[ksk-rollover] ICANN board meeting result and the Current status of KSK-Rollover
list-ksk-rollover at dragon.net
Fri Sep 21 15:46:47 UTC 2018
ray> What about the (hypothetical?) home CPE with a validating resolver
ray> that's been left on the shelf for a couple of years.
ray> RFC 5011 doesn't help those. AFAIK, re-bootstrapping trust for
ray> those is still an unsolved problem.
If said CPE has 2 year old OS/firmware, DNSSEC validation is the least
of the problems it causes if the vendor hasn't figured out how to do
sane/clean updates automatically.
Keeping it from being usefully connected to the internet might be
considered a public service. ;)
More information about the ksk-rollover