On Wed, Apr 8, 2020 at 10:10 PM Benjamin Kaduk via Datatracker < nore...@ietf.org> wrote:
> > Section 6.1, 6.2 > > Should we say anything about when it's safe for a new ZSK to be used to > sign responses? > I think, technically speaking, it is always safe to use a new ZSK, and the only concern is when it's safe to remove and/or revoke the old ZSK (i.e. that it is safe to use ONLY the new ZSK.) Brian
_______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
