On Mar 20, 2017, at 9:50 PM, Brian Dickson <brian.peter.dick...@gmail.com> wrote: > This would require an update every time the KSK is rolled, or whenever the > RRSIG needs to be refreshed. 68 years is an inconvenient interval, so maybe > 50 or 20 years? This is still a lot better than 1 week or 1 month.
Isn't there some inconvenient process involved in using the KSK? I suspect that in practice, this makes it harder, not easier.
_______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
