[dns-operations] .ie Algorithm rollover nit?
Olafur Gudmundsson
ogud at ogud.com
Sun Nov 29 22:19:14 UTC 2020
Victor
as this is going to be an Async operation this is the ONLY right order of execution.
As presence of an algorithm in DS set is a “contract” that the zone is signed by that algorithm,
now that 8 has been removed from the DS set it can next be removed from the DNSKEY set and then the RRSIG’s can be
deleted.
Olafur
> On Nov 27, 2020, at 6:37 PM, Viktor Dukhovni <ietf-dane at dukhovni.org> wrote:
>
>
> Things were going great for the .ie 8 -> 13 rollover, but
> now the algorithm 8 KSK appears to be gone prior to the
> removal of the algorithm 8 DS...
>
> Most resolvers will let this slide, but there could be some
> spots of trouble...
>
> --
> Viktor.
>
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
More information about the dns-operations
mailing list