[dns-operations] What's are the KSR and SKR userd for in KSK rollover?

Matthew Pounsett matt at conundrum.com
Fri Apr 6 02:01:30 UTC 2018

On 5 April 2018 at 21:37, Davey Song(宋林健) <ljsong at biigroup.cn> wrote:

> Hi folks,
> When I read the ICANN’s KSK rollover implementation plan, in Key signing
> ceremony there is a process called KSR (Key Signing Request) and SKR
> (Signing Key Response). I’m not sure what are they used for? Are they a
> formal process and memo to record the activities in the ceremony?
Verisign supplies a set of ZSKs in a Key Signing Request to be signed by
the KSK in the ceremony.  That goes back as an SKR.
I believe it's covered in more detail in the DPS.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20180405/032ecb5a/attachment.html>

More information about the dns-operations mailing list