[dns-operations] 答复: What's are the KSR and SKR userd for in KSK rollover?

[Davey Song(宋林健)]

Thanks Wessels.  

 

Another questions: The xml file are transmitted by a certain secure
mechanism right ? Otherwise it will block the process by the Middle man
attack.

 

Davey

 

发件人: Wessels, Duane [mailto:dwessels at verisign.com] 
发送时间: 2018年4月6日 10:14
收件人: Davey Song(宋林健) 
抄送: dns-operations
主题: Re: [dns-operations] What's are the KSR and SKR userd for in KSK
rollover?

 

Davey, 

 

These are XML documents that convey public key and signature data. 

 

The KSR is how the ZSK operator says “please sign these key sets for me”
and the SKR is how the KSK operator says “okay, here’s your signatures for
them.”

DW


On Apr 5, 2018, at 6:52 PM, Davey Song(宋林健) <ljsong at biigroup.cn> wrote:

Hi folks, 

 

When I read the ICANN’s KSK rollover implementation plan, in Key signing
ceremony there is a process called KSR (Key Signing Request) and SKR
(Signing Key Response). I’m not sure what are they used for? Are they a
formal process and memo to record the activities in the ceremony? 

 

Thanks in advance.

 

Best regards,

Davey

_______________________________________________
dns-operations mailing list
dns-operations at lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-operations mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-operations



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20180406/e4322722/attachment.html>