Re: [ksk-rollover] new ksk and DNS software vendors

manu tman <chantr4@gmail.com> wrote:

During the BoF session this morning, it was asked how long it would take vendors to incorporate the new KSK in their software. The few that spoke said it was a relatively short time.

I think this will depend a lot on whether the patch is distributed as a routine change or as a security-critical fix. I think it won't look particularly good if the whole DNS gets a CVE every year just to roll the keys in a timely fashion :-) Tony. -- f.anthony.n.finch <dot@dotat.at> http://dotat.at/ South Utsire, Forties: Southwesterly 5 or 6. Moderate or rough, occasionally slight. Fair. Good.