[Opendnssec-develop] Standby KSKs

Rickard Bellgrim rickard.bellgrim at iis.se
Thu Mar 25 01:56:50 UTC 2010

Are people happy with this?
If so, should the auditor be patched for this new behaviour before we go to


But the only problem is that some needs the DNSKEY in the zone in order to upload the DS RR using its registrar. One example is our own registrar .SE Direkt. They pull DNSKEY data and present the information to the user, who then choose which DS to upload. The standby keys can thus not be uploaded to .SE using our own registrar.

This behavior in .SE Direkt could be treated as broken. And I will discuss this with our developers. There should also be an option to add DS RR to which there is to corresponding DNSKEY in the zone.

// Rickard

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-develop/attachments/20100325/d4d5b61a/attachment.htm>

More information about the Opendnssec-develop mailing list