[dns-operations] .ie Algorithm rollover nit?

Olafur Gudmundsson ogud at ogud.com
Sun Nov 29 22:19:14 UTC 2020



Victor 
as this is going to be an Async operation this is the ONLY right order of execution. 
As presence of an algorithm in DS set is a “contract” that the zone is signed by that algorithm, 
now that 8 has been removed from the DS set it can next be removed from the DNSKEY set and then the RRSIG’s can be 
deleted. 

Olafur

> On Nov 27, 2020, at 6:37 PM, Viktor Dukhovni <ietf-dane at dukhovni.org> wrote:
> 
> 
> Things were going great for the .ie 8 -> 13 rollover, but
> now the algorithm 8 KSK appears to be gone prior to the
> removal of the algorithm 8 DS...
> 
> Most resolvers will let this slide, but there could be some
> spots of trouble...
> 
> -- 
> 	Viktor.
> 
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations





More information about the dns-operations mailing list