<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Arial" size="2">
<div>-----BEGIN PGP SIGNED MESSAGE-----</div>
<div>Hash: SHA256</div>
<div> </div>
<div>> It does strike me that we need to get this sorted out fast though (i.e.</div>
<div>> before 1.0). In particular, the documentation should describe the</div>
<div>> steps involved in doing a KSK rollover.</div>
<div> </div>
<div>I was having a look on the documentation for the KSK rollover. You can issue to command but there is more to it. We are lacking the possibility to notify the system that it is safe to deactivate the old KSK.</div>
<div> </div>
<div>So my statement is that there is no fully automatic solution for KSK rollover. Since we need interaction with our parent. Or in the case of the root, you need to distribute the new trust anchor. Before we can deactivate the old KSK.</div>
<div> </div>
<div>But OpenDNSSEC do act as if there KSK process is fully automatic...</div>
<div> </div>
<div>I think that you never can solve this by using a timer. E.g. a configurable time interval for the DS distribution.</div>
<div> </div>
<div>We need a command for this.</div>
<div> </div>
<div>// Rickard</div>
<div> </div>
<div>-----BEGIN PGP SIGNATURE-----</div>
<div>Version: 9.8.3 (Build 4028)</div>
<div>Charset: utf-8</div>
<div> </div>
<div>wsBVAwUBSvAHEOCjgaNTdVjaAQgNVAgApxTtibhTDsU8FuO+TM2IXs5R1r+cHwWH</div>
<div>PRoTCT+1cSUfucTnudxFTaYIv2diGY5/OjgBnNbzg3+DPplFPbiBS7RNNSMrJFi/</div>
<div>NFA4bjUSydE+x2xvLTg/N2Kx6Nkl9fCvxLmqDG9Wp542QOYMaKcseDoANFilm0kC</div>
<div>osm/0sPhIhBMD0HNW0zkQS4sF5L3CWekyTiN3i07pc5gRXG6l7saOKheVR6ZRDRT</div>
<div>fx/Fyc+/XmbbMUER3p5YWpZr0h2zxzLXQCQceFnmcoT9nW3rebaOf5+TNJ1pdbdA</div>
<div>/gEBMRKYJ9nXw9UK6Uu7yaRqo2Ey8FusVn30qEal7pPNmI+/CyFasg==</div>
<div>=H3UV</div>
<div>-----END PGP SIGNATURE-----</div>
<div> </div>
<div> </div>
</font>
</body>
</html>