[Opendnssec-user] OpenDNSSEC, HSM and key ceremony

Jakob Schlyter jakob at kirei.se
Fri Jun 11 11:23:21 CEST 2010


On 11 jun 2010, at 11.13, Antoin Verschuren wrote:

> SO what's the use of the ICANN key ceremony then, when OpenDNSSEC can do an unattended KSK key rollover at will ?

ICANN uses OpenDNSSEC for the GSI (Generic Signing Infrastructure[1]), but not for the Root Zone Key Management.

	jakob

[1] http://dns.icann.org/services/gsi/




More information about the Opendnssec-user mailing list