[dns-operations] .fr has 5 DNSKEYs

Stephane Bortzmeyer bortzmeyer at nic.fr
Tue May 31 15:22:51 UTC 2011


On Tue, May 31, 2011 at 10:30:13AM -0400,
 Paul Wouters <paul at xelerance.com> wrote 
 a message of 15 lines which said:

> But you only need to do that when you're doing a ZSK rollover.

When you're *planning* a rollover. Your method does not work for
unexpected rollovers.

> I would expect more outages based on dns packet sizes for the DNSKEY
> set,

I see this as an advantage: debug packet sizes problems today, when
they do not have practical consequences, before we really depend on
DNSSEC.



More information about the dns-operations mailing list