[Opendnssec-develop] Standby KSKs

[Rickard Bellgrim]

Are people happy with this?
and
If so, should the auditor be patched for this new behaviour before we go to
v1.1?

+1

But the only problem is that some needs the DNSKEY in the zone in order to upload the DS RR using its registrar. One example is our own registrar .SE Direkt. They pull DNSKEY data and present the information to the user, who then choose which DS to upload. The standby keys can thus not be uploaded to .SE using our own registrar.

This behavior in .SE Direkt could be treated as broken. And I will discuss this with our developers. There should also be an option to add DS RR to which there is to corresponding DNSKEY in the zone.

// Rickard

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-develop/attachments/20100325/d4d5b61a/attachment.htm>