[ksk-rollover] IoT devices and KSK rollover

Wes Hardaker wjhns1 at hardakers.net
Tue Jul 2 16:20:02 UTC 2019

Paul Wouters <paul at nohats.ca> writes:

> > We go to Mozilla and add support to NSS/NSPR, boom, all Mozilla
> > applications now do it correctly out of the box.
> Having been on the sidelines of two attempts to get this done, I wish
> you a lot of luck. I really hope you succeed, but at the moment I
> wouldn't focus on Mozilla. They are not helpful at the moment.

For reference, we (the dnssec-tools project) filed this bug *with a
patch* 7 years ago:


They aren't interested in DNSSEC (and at public venues have stated
negative opinions about it as well).  Originally it was on their
roadmap, but the browser industry then fell into the speed-war and
page load speeds dominated all other measurements of success.  Thus,
extra DNS lookups was a non-starter.

Wes Hardaker

More information about the ksk-rollover mailing list