[ksk-rollover] RFC 5011 will not be implemented in Dnsmasq

[Rene 'Renne' Bartsch, B.Sc. Informatics]

Hi,

according to Simon Kelly RFC 5011 is not sufficient for automatic DNSSEC key updates and will not be implemented in Dnsmasq (https://www.mail-archive.com/dnsmasq-discuss@lists.thekelleys.org.uk/msg12448.html).

As the majority of SoHo routers uses Dnsmasq as DNS resolver I suggest to address this problem by discussing a suitable solution with Simon Kelly and the IETF workgroups.

Regards,

Renne