[ksk-rollover] ceremonies in April, and managing things less critical and the KSK.

Russ Housley housley at vigilsec.com
Sun Apr 5 21:50:19 UTC 2020

> On Apr 5, 2020, at 5:01 PM, Michael Richardson <mcr+ietf at sandelman.ca> wrote:
> Russ Housley <housley at vigilsec.com> wrote:
>> IANA has emergency procedures that can be used to obtain the needed
>> three shares.  It is clear from the text that you quote, that emergency
>> planning was considered fro the start.  I assume that IANA will declare
>> such an emergency in the next few days, and then generate the next KSK
>> under those procedures.  As I understand it, the auditor will be able
>> to tell that the emergency procedure were properly followed.
> Wow, I didn't think that we'd have to generate a new KSK.
> I think it's enough to get a new ZSK signed, and my reading of the OARC email
> says that this is what they are trying to do.

You are correct.  That was my fingers doing something different from my brain.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 235 bytes
Desc: Message signed with OpenPGP
URL: <http://mm.icann.org/pipermail/ksk-rollover/attachments/20200405/efc16c48/signature.asc>

More information about the ksk-rollover mailing list