<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<br class="">
<div>
<blockquote type="cite" class="">
<div class="">On Sep 21, 2014, at 5:27 PM, Paul Hoffman <<a href="mailto:paul.hoffman@vpnc.org" class="">paul.hoffman@vpnc.org</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">Greetings again. In thinking about the question of "what would happen if we changed the KSK", but without thinking about why and when, it would be good to think about what kinds of systems are out there. My initial list came to three categories
of capabilities:<br class="">
<br class="">
1) Able to automatically pull and correctly use a new KSK</div>
</blockquote>
<blockquote type="cite" class="">
<div class=""><br class="">
2) Cannot automatically pull a new KSK, or cannot correctly use an automatically-pulled KSK; however, it can correctly get and use a new KSK with operator intervention<br class="">
<br class="">
3) Even with operator intervention, cannot pull a new KSK or cannot correctly use an manually-pulled KSK<br class="">
<br class="">
Are there other categories that would look operationally different to either customers of the system or to operators of signed zones?<br class="">
<br class="">
</div>
</blockquote>
<br class="">
</div>
<div><br class="">
</div>
<div>Perhaps there are instances that do leap-off fait type of configurations but I am not aware of them. </div>
<div><br class="">
</div>
<div>Also the systems that have a to long off-line shelf life to be able to do a RFC5011 type rollover. They would be in (1) if they’d be on during the rollover but because of their off-lineness they might find themselves in cat. (2).</div>
<div><br class="">
</div>
<div>I argue that we ignore category (3). If we allow ourselves to be ossified by that type of mistake we will never be able to roll. In fact the argument for roll early and often is to make sure to weed out all existence of (3) and make category (2) aware
that they will need to pay attention.</div>
<div><br class="">
</div>
<div><br class="">
</div>
<div><br class="">
</div>
<div>—Olaf</div>
<div><br class="">
</div>
<div><br class="">
</div>
<div apple-content-edited="true" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<br class="Apple-interchange-newline">
—————————— </div>
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
Olaf Kolkman</div>
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
Internet Society</div>
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
Chief Internet Technology Officer</div>
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<a href="mailto:kolkman@isoc.org" class="">kolkman@isoc.org</a> <a href="http://www.isoc.org" class="">www.isoc.org</a></div>
</div>
</div>
</div>
<br class="">
</body>
</html>