[ksk-rollover] Description of my analysis of the too-many-KSK queries problem
Wes Hardaker
wjhns1 at hardakers.net
Fri Apr 5 16:23:03 UTC 2019
Evan Hunt <each at isc.org> writes:
> Since the revoked key is no longer in the root zone, I'll need to set up a
> toy root server to confirm that that was indeed the relevant change; I
> haven't done so yet.
(do note that the report I posted yesterday shows that things are still
happening with the current root zone too, with KSK2010 being completely
missing... so you probably need to test against both a fake root with a
revoked key *and* the current state, as there may be more than one bug)
--
Wes Hardaker
USC/ISI
More information about the ksk-rollover
mailing list