On 4/5/20 12:21 PM, Russ Housley wrote:
Michael Richardson <mcr+ietf@sandelman.ca> wrote:
I am unclear from reading things over again how the ZSK gets to the>>> ceremony. Is a new ZSK keypair generated during the KSK, or is it generated>>> elsewhere and only the public part brought?
This is probably the wrong list to ask on.
IANA has emergency procedures that can be used to obtain the needed three shares. It is clear from the text that you quote, that emergency planning was considered fro the start. I assume that IANA will declare such an emergency in the next few days, and then generate the next KSK under those procedures. As I understand it, the auditor will be able to tell that the emergency procedure were properly followed.
Folks may find the discussion on this thread: https://lists.dns-oarc.net/pipermail/dns-operations/2020-March/019874.html also informative on this topic. Keith