[dns-operations] Why roll the KSK? (was Sad news today: systemd-resolved to be deployed in Ubuntu 16.10)

[Paul Vixie]

David Conrad wrote:
> Paul,
>
>
>> yeti-dns is about to start its first KSK roll experiment, using RFC 5011. i expect to be enlightened, one way or the other, by the results.
>
> Any idea how many validating resolvers will be participating in the experiment?

a couple dozen.

> Out of curiosity, how is it different than http://keyroll.systems or https://icksk.dnssek.info/fauxroot.html?

i don't know anything about those.

-- 
P Vixie