[Dnssec-deployment] More than 90k DNSSEC domains in .CZ

[Olaf Kolkman]

On Mar 12, 2010, at 12:03 PM, Lutz Donnerhacke wrote:

> Separate keys are a prerequirement for domain name server changes, owner, or
> registrar changes. All those issues might occur within "seconds".



You are to terse here.  Is your underlying assumption that the private key is passed around during those operations?

I believe that to be a fairly unrealistic assumption.

--Olaf


________________________________________________________ 

Olaf M. Kolkman                        NLnet Labs
                                       Science Park 140, 
http://www.nlnetlabs.nl/               1098 XG Amsterdam