*grumble* It’s not 5011s fault if the root zone does not currently include standby keys.
Fortunately, that may be a shorter term issue. Mike
On Fri, Mar 29, 2019 at 12:38 Ray Bellis <
ray@isc.org> wrote:
On 29/03/2019 12:28, Salz, Rich via ksk-rollover wrote:
> What is the purpose of doing a key rollover? I'll claim that it is
> to help make sure you're ready to handle an unplanned situation. If
> nothing goes wrong, then you don't need to change the key. If
> something does go wrong you do need to react; the speed required
> depends on the circumstances.
Indeed - if you need to do it because the current key has been
compromised then 5011 doesn't help at all because of the 30 day
hold-time timer.
Ray
_______________________________________________
ksk-rollover mailing list
ksk-rollover@icann.org
https://mm.icann.org/mailman/listinfo/ksk-rollover