[Dnssec-deployment] DNSSEC4J and trust anchors

[Jakob Schlyter]

On 30 jan 2012, at 10:25, Florian Weimer wrote:

> The postponement conjecture is based on the observation that root KSK
> rollover has never been tested and cannot be tested.

There was extensive root KSK rollover testing for 5011 in a lab environment before the root was signed. I've read the test report, but I'm not sure it has be published in public.

	jakob