March 29, 2019
12:44 p.m.
On 29/03/2019 13:26, StJohns, Michael wrote:
*grumble* It’s not 5011s fault if the root zone does not currently include standby keys.
No slight at you intended, Mike :)
Fortunately, that may be a shorter term issue. Mike
If standby keys become a thing, would it perhaps be useful if keys were pre-published as CDNSKEY / CDS records in the root so that they can be distributed without causing additional computational load on validators or bloating of the DNSKEY RR set? Ray