[ksk-rollover] IoT devices and KSK rollover

[Wes Hardaker]

Paul Wouters <paul at nohats.ca> writes:

> > We go to Mozilla and add support to NSS/NSPR, boom, all Mozilla
> > applications now do it correctly out of the box.
> 
> Having been on the sidelines of two attempts to get this done, I wish
> you a lot of luck. I really hope you succeed, but at the moment I
> wouldn't focus on Mozilla. They are not helpful at the moment.

For reference, we (the dnssec-tools project) filed this bug *with a
patch* 7 years ago:

https://bugzilla.mozilla.org/show_bug.cgi?id=748232

They aren't interested in DNSSEC (and at public venues have stated
negative opinions about it as well).  Originally it was on their
roadmap, but the browser industry then fell into the speed-war and
page load speeds dominated all other measurements of success.  Thus,
extra DNS lookups was a non-starter.

-- 
Wes Hardaker
USC/ISI