[ksk-rollover] (Un)planning future KSK replacements

Evan Hunt each at isc.org
Fri Mar 29 14:59:23 UTC 2019

On Fri, Mar 29, 2019 at 02:43:06PM +0100, StJohns, Michael wrote:
> Won’t be useful for 5011 resolvers.

This would be a new approach, not 5011.

As I said at the mic, since the operational effect of having a standby key
was pretty manageable, we should do that routinely. But publishing CDS in
the root also strikes me as a good idea. I could see it getting used in
some environments where 5011 isn't.

Evan Hunt -- each at isc.org
Internet Systems Consortium, Inc.

More information about the ksk-rollover mailing list