[ksk-rollover] ICANN board meeting result and the Current status of KSK-Rollover

Paul Ebersman list-ksk-rollover at dragon.net
Fri Sep 21 15:46:47 UTC 2018

ray> What about the (hypothetical?) home CPE with a validating resolver
ray> that's been left on the shelf for a couple of years.

ray> RFC 5011 doesn't help those.  AFAIK, re-bootstrapping trust for
ray> those is still an unsolved problem.

If said CPE has 2 year old OS/firmware, DNSSEC validation is the least
of the problems it causes if the vendor hasn't figured out how to do
sane/clean updates automatically.

Keeping it from being usefully connected to the internet might be
considered a public service. ;)

More information about the ksk-rollover mailing list