[Dnssec-deployment] More than 90k DNSSEC domains in .CZ

[Lutz Donnerhacke]

* Olafur Gudmundsson wrote:
> Nothing in the DNS control plane happens in seconds :-(

Many people invested a lot of work to produce the impression, that DNS
managment is just a matter of "click" to make it happen.

Many registries allow "instant" domain transfers by AuthInfo. Many
registries allow "instant" name server changes ...

With DNSSEC all those issues become a bit slower (as you described in your
presentation). But I fear, that a shared key between zones is a show stopper
for all those issues. It requires an additional full key rollover when
changing the name servers.