[dns-operations] Why did .KE go insecure? ns36.cdns.net
Viktor Dukhovni
ietf-dane at dukhovni.org
Fri Sep 23 18:30:00 UTC 2022
On Fri, Sep 23, 2022 at 07:48:50PM +0200, Bill Woodcock wrote:
> > On Sep 23, 2022, at 7:27 PM, Jacques Latour <Jacques.Latour at cira.ca> wrote:
> > Just looking quickly, if you look back in dnsviz on Sept 15, I think a KSK roll over didn't go as plan...
>
> That was not the root cause. I’m sure they’ll discuss it when they’re ready to.
I concur. There were no observed DNSSEC issues, such as a problem
rollover, ... The DS records were withdrawn cleanly, with the RRSIGs
still in place long enough to not cause any issues.
--
Viktor.
More information about the dns-operations
mailing list