<!doctype html public "-//W3C//DTD W3 HTML//EN">
<html><head><style type="text/css"><!--
blockquote, dl, ul, ol, li { padding-top: 0 ; padding-bottom: 0 }
--></style><title>roll over</title></head><body>
<div>At 11:50 AM -1000 7/10/06, Randy Bush wrote:</div>
<div><br></div>
<div>>if it is going to be operational and official, might it not
be</div>
<div>>a good idea to understand how key rollover will be
done?</div>
<div><br></div>
<div>There are two kinds of roll over. One is simple key change
and is described in a document sitting in the RFC-Editor Pub Queue.
I.e., the IETF is done with it, but it hasn't been sent to the
printers yet.</div>
<div><br></div>
<div
>http://www.ietf.org/internet-drafts/draft-ietf-dnsop-dnssec-operatio<span
></span>nal-practices-08.txt</div>
<div><br></div>
<div>The other kind of roll over is trust anchor. There is a
draft of requirements for that here (not vetted yet):</div>
<div><br></div>
<div
>http://www.ietf.org/internet-drafts/draft-ietf-dnsext-rollover-requi<span
></span>rements-02.txt</div>
<div><br></div>
<div>And there are these approaches:</div>
<div><br></div>
<div
>http://www.ietf.org/internet-drafts/draft-ietf-dnsext-trustupdate-ti<span
></span>mers-02.txt</div>
<div
>http://tools.ietf.org/wg/dnsext/draft-ietf-dnsext-trustupdate-thresh<span
></span>old/draft-ietf-dnsext-trustupdate-threshold-01.txt</div>
<div><br></div>
<div>The latter is an expired document.</div>
<div><br></div>
<div>Trust Anchor Roll Over is a topic for the in-person meeting of
the IETF DNSEXT WG later this day.</div>
<div><br></div>
<div>Comments are welcome, you don't have to be there in person, you
can send things to the namedroppers@ops.ietf.org mail list, or to the
editors.</div>
<x-sigsep><pre>--
</pre></x-sigsep>
<div
>-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=<span
></span>-=-=-=-<br>
Edward
Lewis <span
></span
> <span
></span
> <span
></span
> <span
></span> +1-571-434-5468<br>
NeuStar</div>
<div><br></div>
<div>Soccer/Futbol. IPv6. Both have lots of 1's and 0's and have
a hard time</div>
<div>catching on in North America.</div>
</body>
</html>