This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at https://mailman.ripe.net/archives/list/dns-wg@ripe.net/

[dns-wg] Re: DLV and the NCC's KSKs

Previous message (by thread): [dns-wg] DLV and the NCC's KSKs
Next message (by thread): [dns-wg] DNSSEC outage in ripe.net and 0.a.2.ip6.arpa

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Anand Buddhdev anandb at ripe.net
Wed Apr 20 11:49:14 CEST 2011

On 20/04/2011 11:22, Jim Reid wrote:

> IIUC the NCC never lodged their KSKs with ISC's DLV thing. Though they
> somehow ended up there and this created some issues later.

This was the main issue. ISC imported the NCC's trust anchors without
asking.

However, we spoke with ISC about this, and resolved it. ISC no longer
imports our trust anchors automatically. Instead, we have an account in
the ISC TAR, and we choose what goes in, and when.

At the moment, we have just 10 islands of trust left in the ISC TAR, and
we're just waiting for their parents to be signed.

Regards,

Anand Buddhdev
RIPE NCC

Previous message (by thread): [dns-wg] DLV and the NCC's KSKs
Next message (by thread): [dns-wg] DNSSEC outage in ripe.net and 0.a.2.ip6.arpa

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

[ dns-wg Archives ]