Question about KSK

[WBrown at e1b.org]

We are authoritative for a few dozen small zones.  Is it possible to use 
the same KSK for all of them?  I can see where if it gets compromised we 
would need to resign all zones using the KSK at once.  How much effort 
would I be saving sharing the KSK?

I'm sure there are plenty of other good reasons not to do this... 
Enlighten me!


-- 

William Brown
Messaging and Core Hosted Application Technical Teams
Technology Services, WNYRIC, Erie 1 BOCES
(716) 821-7285




Confidentiality Notice: 
This electronic message and any attachments may contain confidential or 
privileged information, and is intended only for the individual or entity 
identified above as the addressee. If you are not the addressee (or the 
employee or agent responsible to deliver it to the addressee), or if this 
message has been addressed to you in error, you are hereby notified that 
you may not copy, forward, disclose or use any part of this message or any 
attachments. Please notify the sender immediately by return e-mail or 
telephone and delete this message from your system.