[Dnssec-deployment] DNSSEC4J and trust anchors

Jakob Schlyter jakob at kirei.se
Mon Jan 30 07:31:09 EST 2012


On 30 jan 2012, at 10:25, Florian Weimer wrote:

> The postponement conjecture is based on the observation that root KSK
> rollover has never been tested and cannot be tested.

There was extensive root KSK rollover testing for 5011 in a lab environment before the root was signed. I've read the test report, but I'm not sure it has be published in public.

	jakob



More information about the Dnssec-deployment mailing list