Aug. 10, 2017
3:19 p.m.
On Aug 9, 2017, at 10:31 AM, Edward Lewis <edward.lewis@icann.org> wrote:
Looking at my records, the new KSK appeared between 2017-07-11@1305UTC and 2017-07-11@1405UTC. (I run some probes at 5 minutes after the hour.)
"30 Days later" means 10 August (not 11 August!). We are less than 24 hours away from that as I write this message (about 20 hours now).
Doesn't the actual time depend on when they grabbed the key? Thus, isn't there a 48-hour window for when other people will have the new key be trusted? Or am I missing something about RFC 5011? --Paul