[Dnssec-deployment] More than 90k DNSSEC domains in .CZ
lutz at iks-jena.de
Fri Mar 12 12:06:33 EST 2010
* Olafur Gudmundsson wrote:
> Nothing in the DNS control plane happens in seconds :-(
Many people invested a lot of work to produce the impression, that DNS
managment is just a matter of "click" to make it happen.
Many registries allow "instant" domain transfers by AuthInfo. Many
registries allow "instant" name server changes ...
With DNSSEC all those issues become a bit slower (as you described in your
presentation). But I fear, that a shared key between zones is a show stopper
for all those issues. It requires an additional full key rollover when
changing the name servers.
More information about the Dnssec-deployment