[dns-operations] What's are the KSR and SKR userd for in KSK rollover?

[Roy Arends]

Davey,

You can find the tools to generate SKRs from KSRs here:

https://github.com/iana-org/dnssec-keytools

Roy

> On 6 Apr 2018, at 03:14, Wessels, Duane <dwessels at verisign.com> wrote:
> 
> Davey,
> 
> These are XML documents that convey public key and signature data. 
> 
> The KSR is how the ZSK operator says “please sign these key sets for me” and the SKR is how the KSK operator says “okay, here’s your signatures for them.”
> 
> DW
> 
> On Apr 5, 2018, at 6:52 PM, Davey Song(宋林健) <ljsong at biigroup.cn> wrote:
> 
>> Hi folks, 
>>  
>> When I read the ICANN’s KSK rollover implementation plan, in Key signing ceremony there is a process called KSR (Key Signing Request) and SKR (Signing Key Response). I’m not sure what are they used for? Are they a formal process and memo to record the activities in the ceremony? 
>>  
>> Thanks in advance.
>>  
>> Best regards,
>> Davey
>> _______________________________________________
>> dns-operations mailing list
>> dns-operations at lists.dns-oarc.net
>> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
>> dns-operations mailing list
>> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
>> 
>> 
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-operations mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations