[dns-operations] .fr has 5 DNSKEYs

Edward Lewis Ed.Lewis at neustar.biz
Tue May 31 16:09:32 UTC 2011


At 9:44 -0400 5/31/11, Olafur Gudmundsson wrote:

>Rescue ZSK makes sense if you do not have full confidence in your 
>signing system, or parts of it. In this case the Rescue key should 
>use a different signing system to take over when things go bad.

And it makes sense in other scenarios too.  (Not willing to hash this 
out in a mail list, it would take too long.)

-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Edward Lewis
NeuStar                    You can leave a voice message at +1-571-434-5468

Now, don't say I'm always complaining.
Wait, that's a complaint, isn't it?



More information about the dns-operations mailing list