On Thu, Mar 27, 2014 at 03:17:04PM +0000,
 Rose, Scott <scott.r...@nist.gov> wrote 
 a message of 45 lines which said:

> It is likely safe enough now to increase to 2048 for both KSK and
> ZSK.  Zones are doing this now and haven't seen any horror stories.

If you want to test, rd.nic.fr has large KSK and ZSK (not because we
believe it is necessary for security but because we wanted to explore
the limits).

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to