[ksk-rollover] (Un)planning future KSK replacements

A. Schulze sca at andreasschulze.de
Fri Mar 29 13:49:47 UTC 2019



Am 29.03.19 um 14:43 schrieb StJohns, Michael:
> Won’t be useful for 5011 resolvers.   They’re looking for a specific pattern of data publishing of dnskey and rrsigs. Publishing a cdnskey wouldn’t result in any new trust anchor  being installed. 
sounds like 5011bis describing $to_be_defined and get that implemented by resolver vendors.

Andreas


More information about the ksk-rollover mailing list