[Yeti DNS Discuss] 答复: Multiple ZSK experiment (MZSK) launching today

'Stephane Bortzmeyer' bortzmeyer at nic.fr
Mon Feb 22 12:58:50 UTC 2016


On Mon, Feb 22, 2016 at 02:03:00PM +0800,
 Davey Song <ljsong at biigroup.cn> wrote 
 a message of 48 lines which said:

> Currently BII and WIDE only use KSK to sign the dnskey. But TISF use
> zsk sign dnskey as well.

Food for thought:

Today, the USG root, .com, .de, .se and .uk sign only with the
KSK. .org, .cz, .cn, .pizza and .fr sign with both the KSK and the
ZSK.

RFC 6781 (or RFC 6841) apparently provides no guidance on that subject.

When people ask, there is no always a response
<https://lists.dns-oarc.net/pipermail/dns-operations/2013-March/009948.html>



More information about the discuss mailing list