[dns-operations] What's are the KSR and SKR userd for in KSK rollover?

[Matthew Pounsett]

On 5 April 2018 at 21:37, Davey Song(宋林健) <ljsong at biigroup.cn> wrote:

> Hi folks,
>
>
>
> When I read the ICANN’s KSK rollover implementation plan, in Key signing
> ceremony there is a process called KSR (Key Signing Request) and SKR
> (Signing Key Response). I’m not sure what are they used for? Are they a
> formal process and memo to record the activities in the ceremony?
>
>
Verisign supplies a set of ZSKs in a Key Signing Request to be signed by
the KSK in the ceremony.  That goes back as an SKR.
I believe it's covered in more detail in the DPS.
https://www.iana.org/dnssec/dps/ksk-operator/ksk-dps.txt
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20180405/032ecb5a/attachment.html>