botched KSK rollover
Phil Mayers
p.mayers at imperial.ac.uk
Mon Aug 21 13:52:41 UTC 2017
On 21/08/2017 14:23, Matthew Pounsett wrote:
>
>
> On 21 August 2017 at 07:18, Phil Mayers <p.mayers at imperial.ac.uk
> <mailto:p.mayers at imperial.ac.uk>> wrote:
>
>
> Gandi are another excellent registrar that I can recommend. They
> have a comprehensive API for all their features, including uploading
> DNSSEC public keys and consequent creation of the DS record.
>
> I'm hoping CDS eventually makes this all obsolete.
>
> Gandi also has a beta implementation of
> draft-ietf-regext-dnsoperator-to-rrr-protocol, which requires
> CDS/CDNSKEY support, and provides registrars with a way to bootstrap
> DNSSEC ... so you may get your wish sooner than later.
Cool, I did not know that. Good to hear.
More information about the bind-users
mailing list