This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at https://mailman.ripe.net/archives/list/[email protected]/

[dns-wg] Re: New key-signing keys (KSKs) for RIPE NCC forward and reverse zones

• Previous message (by thread): [dns-wg] Re: New key-signing keys (KSKs) for RIPE NCC forward and reverse zones
• Next message (by thread): [dns-wg] DNS lameness question

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Paul Wouters paul at xelerance.com
Tue Mar 17 16:54:00 CET 2009

On Tue, 17 Mar 2009, Anand Buddhdev wrote:

> The toolset that we're using does not have support for setting the
> revocation bit, so we won't be setting it.
>
> Are many people actually running resolvers that understand RFC 5011?

Autotrust can update the keys and restart the resolver with the new keys
primed for it. This is the setup currently in Fedora-11 Beta.

Paul

• Previous message (by thread): [dns-wg] Re: New key-signing keys (KSKs) for RIPE NCC forward and reverse zones
• Next message (by thread): [dns-wg] DNS lameness question

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

[ dns-wg Archives ]