*grumble* It’s not 5011s fault if  the root zone does not currently include standby keys.  

Fortunately, that may be a shorter term issue.   Mike


On Fri, Mar 29, 2019 at 12:38 Ray Bellis <ray@isc.org> wrote:


On 29/03/2019 12:28, Salz, Rich via ksk-rollover wrote:

> What is the purpose of doing a key rollover?  I'll claim that it is
> to help make sure you're ready to handle an unplanned situation. If
> nothing goes wrong, then you don't need to change the key. If
> something does go wrong you do need to react; the speed required
> depends on the circumstances.

Indeed - if you need to do it because the current key has been
compromised then 5011 doesn't help at all because of the 30 day
hold-time timer.

Ray



_______________________________________________
ksk-rollover mailing list
ksk-rollover@icann.org
https://mm.icann.org/mailman/listinfo/ksk-rollover