[ksk-rollover] RFC 5011 will not be implemented in Dnsmasq
Rene 'Renne' Bartsch, B.Sc. Informatics
ml at bartschnet.de
Mon Jan 7 14:04:58 UTC 2019
according to Simon Kelly RFC 5011 is not sufficient for automatic DNSSEC key updates and will not be implemented in Dnsmasq (https://email@example.com/msg12448.html).
As the majority of SoHo routers uses Dnsmasq as DNS resolver I suggest to address this problem by discussing a suitable solution with Simon Kelly and the IETF workgroups.
More information about the ksk-rollover