[dns-operations] Why roll the KSK? (was Sad news today: systemd-resolved to be deployed in Ubuntu 16.10)

Paul Vixie vixie at tisf.net
Mon Jun 6 22:33:11 UTC 2016

David Conrad wrote:
> Paul,
>> yeti-dns is about to start its first KSK roll experiment, using RFC 5011. i expect to be enlightened, one way or the other, by the results.
> Any idea how many validating resolvers will be participating in the experiment?

a couple dozen.

> Out of curiosity, how is it different than http://keyroll.systems or https://icksk.dnssek.info/fauxroot.html?

i don't know anything about those.

P Vixie

More information about the dns-operations mailing list