Re: DNSSEC Key Rollover Questions

2011-06-20 Thread Phil Mayers
On 06/18/2011 03:48 PM, Spain, Dr. Jeffry A. wrote: Assume that bind 9.8.0 is in operation. A zone is configured with auto-dnssec maintain, and the zone signing keys K and its successor K’ are published. Further assume that the activation time for K has passed and the zone is properly signed with

DNSSEC Key Rollover Questions

2011-06-18 Thread Spain, Dr. Jeffry A.
Assume that bind 9.8.0 is in operation. A zone is configured with auto-dnssec maintain, and the zone signing keys K and its successor K' are published. Further assume that the activation time for K has passed and the zone is properly signed with K. Now suppose that the activation time for K' arr