[dns-operations] .fr has 5 DNSKEYs

Stephane Bortzmeyer bortzmeyer at nic.fr
Mon May 30 08:22:23 UTC 2011


On Tue, May 24, 2011 at 06:54:04AM +0200,
 Stephane Bortzmeyer <bortzmeyer at nic.fr> wrote 
 a message of 18 lines which said:

> OpenDNSSEC can be, depending on its configuration, quite greedy :-)

By the way, I forgot to explain the .FR configuration, sorry. We keep
a rescue key at all times. So the minimum number of keys is four (one
KSK, one rescue KSK, one ZSK, one rescue ZSK). During rollovers, there
is sometimes one more KSK or ZSK (and both if the rollovers happen to
overlap).

Here were the keysets published in the last months:

['2331', '43893', '39538', '1336*', '60274*']        (first 2011-01-26 08:54:53Z, last 2011-02-12 12:45:10Z)

['2331', '39538', '1336*', '60274*'] (first 2011-02-12 13:45:18Z, last 2011-03-10 07:45:08Z)

['2331', '39538', '1336*', '60274*', '29434']        (first 2011-03-10 08:45:29Z, last 2011-04-13 11:46:41Z)

['39538', '1336*', '60274*', '29434']        (first 2011-04-13 12:45:55Z, last 2011-05-09 06:45:03Z)

['39538', '1336*', '60274*', '29434', '64335']       (first 2011-05-09 07:45:49Z, last 2011-05-30 06:46:42Z)



More information about the dns-operations mailing list