[Yeti DNS Discuss] First KSK rollover in Yeti Testbed

Stephane Bortzmeyer bortzmeyer at nic.fr
Wed Jul 1 07:41:39 UTC 2015


On Tue, Jun 30, 2015 at 06:14:54PM +0800,
 Davey Song <ljsong at biigroup.cn> wrote 
 a message of 147 lines which said:

> NOTE THAT: the Yeti KSK is going to rollover 2.5 hours later. The
> yeti KSK (RSASHA256 2048) rollover every three month.

Correct me if I'm wrong but it means that:

* root name server operators are not concerned
* resolver operators who do not implement RFC 5011 (or who did not
  update the trust anchor by hand) will suffer.

Correct?


More information about the discuss mailing list