[ksk-rollover] Description of my analysis of the too-many-KSK queries problem

Wes Hardaker wjhns1 at hardakers.net
Fri Apr 5 16:23:03 UTC 2019


Evan Hunt <each at isc.org> writes:

> Since the revoked key is no longer in the root zone, I'll need to set up a
> toy root server to confirm that that was indeed the relevant change; I
> haven't done so yet.

(do note that the report I posted yesterday shows that things are still
happening with the current root zone too, with KSK2010 being completely
missing...  so you probably need to test against both a fake root with a
revoked key *and* the current state, as there may be more than one bug)
-- 
Wes Hardaker
USC/ISI


More information about the ksk-rollover mailing list