[dns-operations] .ie Algorithm rollover nit?
ogud at ogud.com
Sun Nov 29 22:19:14 UTC 2020
as this is going to be an Async operation this is the ONLY right order of execution.
As presence of an algorithm in DS set is a “contract” that the zone is signed by that algorithm,
now that 8 has been removed from the DS set it can next be removed from the DNSKEY set and then the RRSIG’s can be
> On Nov 27, 2020, at 6:37 PM, Viktor Dukhovni <ietf-dane at dukhovni.org> wrote:
> Things were going great for the .ie 8 -> 13 rollover, but
> now the algorithm 8 KSK appears to be gone prior to the
> removal of the algorithm 8 DS...
> Most resolvers will let this slide, but there could be some
> spots of trouble...
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
More information about the dns-operations