On Friday, January 9, 2015, Tony Finch wrote:
>
> > On 9 Jan 2015, at 12:50, Stephane Bortzmeyer > wrote:
> >
> > I'm looking for resources discussing the pros and cons of sharing
> > DNSSEC keys between zones.
> >
> > I find nothing in RFC 6841 or 6781. Any pointer?
>
> There is a paragraph abo
On Fri, Jan 09, 2015 at 07:10:28PM +, Tony Finch wrote:
> There is a paragraph about this at
> http://users.isc.org/~jreed/dnssec-guide/dnssec-guide.html#same-key-for-multiple-zones
the argument regarding the extent of a compromise only holds if
you think of cryptanalitic rather than operati
