[ksk-rollover] (Un)planning future KSK replacements
A. Schulze
sca at andreasschulze.de
Fri Mar 29 13:49:47 UTC 2019
Am 29.03.19 um 14:43 schrieb StJohns, Michael:
> Won’t be useful for 5011 resolvers. They’re looking for a specific pattern of data publishing of dnskey and rrsigs. Publishing a cdnskey wouldn’t result in any new trust anchor being installed.
sounds like 5011bis describing $to_be_defined and get that implemented by resolver vendors.
Andreas
More information about the ksk-rollover
mailing list