[dns-operations] What's are the KSR and SKR userd for in KSK rollover?
matt at conundrum.com
Fri Apr 6 02:01:30 UTC 2018
On 5 April 2018 at 21:37, Davey Song(宋林健) <ljsong at biigroup.cn> wrote:
> Hi folks,
> When I read the ICANN’s KSK rollover implementation plan, in Key signing
> ceremony there is a process called KSR (Key Signing Request) and SKR
> (Signing Key Response). I’m not sure what are they used for? Are they a
> formal process and memo to record the activities in the ceremony?
Verisign supplies a set of ZSKs in a Key Signing Request to be signed by
the KSK in the ceremony. That goes back as an SKR.
I believe it's covered in more detail in the DPS.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the dns-operations