[Yeti DNS Discuss] "Is DNSSEC key rollover safe to perform?"

["Davey(宋林健)"]

As we plan to hold off the current process KSK rollover in current Yeti system, it is a question how to fix the engine when we are still on the plane.

One way to achieve this is to create another very long time KSK for next rollover, and publish the key in the website and Github. Then we can stop at this key.

Davey

> 在 2015年7月22日，15:33，Stephane Bortzmeyer <bortzmeyer at nic.fr> 写道：
> 
> As we now know, no :-)
> 
> http://blog.apnic.net/2015/07/22/ietf93-getting-your-ducks-in-a-row-in-dns/
> 
> 
> _______________________________________________
> discuss mailing list
> discuss at lists.yeti-dns.org
> http://lists.yeti-dns.org/mailman/listinfo/discuss

---------------------------
Davey Song(宋林健)
BII Lab
ljsong at biigroup.cn



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.yeti-dns.org/pipermail/discuss/attachments/20150805/80ad41cf/attachment.html>