Re: [ksk-rollover] Description of my analysis of the too-many-KSK queries problem

Evan Hunt <each@isc.org> writes:

Since the revoked key is no longer in the root zone, I'll need to set up a toy root server to confirm that that was indeed the relevant change; I haven't done so yet.

(do note that the report I posted yesterday shows that things are still happening with the current root zone too, with KSK2010 being completely missing... so you probably need to test against both a fake root with a revoked key *and* the current state, as there may be more than one bug) -- Wes Hardaker USC/ISI