[ksk-rollover] (Un)planning future KSK replacements

Ray Bellis ray at isc.org
Fri Mar 29 12:44:06 UTC 2019

On 29/03/2019 13:26, StJohns, Michael wrote:
> *grumble* It’s not 5011s fault if  the root zone does not currently 
> include standby keys.

No slight at you intended, Mike :)

> Fortunately, that may be a shorter term issue.   Mike

If standby keys become a thing, would it perhaps be useful if keys were 
pre-published as CDNSKEY / CDS records in the root so that they can be 
distributed without causing additional computational load on validators 
or bloating of the DNSKEY RR set?


More information about the ksk-rollover mailing list