On 11 jun 2010, at 11.02, Antoin Verschuren wrote: > I wonder how ICANN or .se is doing this with OpenDNSSEC. OpenDNSSEC has currently no support for offline keys, so both ICANN and .SE are most likely using online KSK and ZSK. jakob -- Jakob Schlyter Kirei AB - http://www.kirei.se/