<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Anyone?<br><div><br><div>Begin forwarded message:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; font-size:medium; color:rgba(0, 0, 0, 1);"><b>From: </b></span><span style="font-family:'Helvetica'; font-size:medium;">Alex Dalitz <<a href="mailto:AlexD@nominet.org.uk">AlexD@nominet.org.uk</a>><br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; font-size:medium; color:rgba(0, 0, 0, 1);"><b>Date: </b></span><span style="font-family:'Helvetica'; font-size:medium;">18 January 2011 09:27:52 GMT<br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; font-size:medium; color:rgba(0, 0, 0, 1);"><b>To: </b></span><span style="font-family:'Helvetica'; font-size:medium;">Rickard Bellgrim <<a href="mailto:rickard.bellgrim@iis.se">rickard.bellgrim@iis.se</a>><br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; font-size:medium; color:rgba(0, 0, 0, 1);"><b>Cc: </b></span><span style="font-family:'Helvetica'; font-size:medium;">"<a href="mailto:opendnssec-develop@lists.opendnssec.org">opendnssec-develop@lists.opendnssec.org</a>" <<a href="mailto:opendnssec-develop@lists.opendnssec.org">opendnssec-develop@lists.opendnssec.org</a>><br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; font-size:medium; color:rgba(0, 0, 0, 1);"><b>Subject: </b></span><span style="font-family:'Helvetica'; font-size:medium;"><b>[Opendnssec-develop] Re: [Opendnssec-user] how does auditor calculate delays?</b><br></span></div><br><div>Hi Rickard -<br><br><blockquote type="cite"><blockquote type="cite">Why is the SOA ttl considered for the check? DNSKEY TTL I'd understand,<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">but SOA?<br></blockquote></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">Yes, that sounds strange. The first ZSK should be pre-published according to this time:<br></blockquote><blockquote type="cite">Ipub = Dprp + min(TTLsoa, SOAmin)<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">The following ZSK:s should be pre-published using this time:<br></blockquote><blockquote type="cite">Ipub = Dprp + TTLkey<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">We will have a look at this.<br></blockquote><br><blockquote type="cite">From the spec ( <a href="http://trac.opendnssec.org/wiki/Signer/AuditorRequirements">http://trac.opendnssec.org/wiki/Signer/AuditorRequirements</a> ) :<br></blockquote><br>"Give an error if a key is seen in use without it having first been seen as prepublished for a time of at least the zone SOA TTL. [E]"<br><br>Should the specification be changed?<br><br>Thanks,<br><br><br>Alex._______________________________________________<br>Opendnssec-develop mailing list<br><a href="mailto:Opendnssec-develop@lists.opendnssec.org">Opendnssec-develop@lists.opendnssec.org</a><br>https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop<br></div></blockquote></div><br></body></html>