Hi all, My question is that instead of messing with the DNSSEC key Rollover timing and all that manual and automation tools dependencies, why not simply use a key revocation list just like a certificate revocation list (CRL) ?
_______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop