> On 11 May 2022, at 13:20, Anand Buddhdev <ana...@ripe.net> wrote:
>
> Our main reason is that we do not have separate storage for the KSKs and
> ZSKs. They were all stored together on the signer. Additionally, our ECDSA
> KSKs and ZSKs were of the same size. Therefore, there is no additional
> protection offered by separating them, and so it is reasonable to use a CSK.
Makes sense. Like everything else you do. Thanks Anand.
--
To unsubscribe from this mailing list, get a password reminder, or change your
subscription options, please visit:
https://lists.ripe.net/mailman/listinfo/dns-wg
