[Opendnssec-user] OpenDNSSEC, HSM and key ceremony

Jakob Schlyter jakob at kirei.se
Fri Jun 11 09:23:21 UTC 2010

On 11 jun 2010, at 11.13, Antoin Verschuren wrote:

> SO what's the use of the ICANN key ceremony then, when OpenDNSSEC can do an unattended KSK key rollover at will ?

ICANN uses OpenDNSSEC for the GSI (Generic Signing Infrastructure[1]), but not for the Root Zone Key Management.


[1] http://dns.icann.org/services/gsi/

More information about the Opendnssec-user mailing list