botched KSK rollover

[Phil Mayers]

On 21/08/2017 14:23, Matthew Pounsett wrote:
> 
> 
> On 21 August 2017 at 07:18, Phil Mayers <p.mayers at imperial.ac.uk 
> <mailto:p.mayers at imperial.ac.uk>> wrote:
> 
> 
>     Gandi are another excellent registrar that I can recommend. They
>     have a comprehensive API for all their features, including uploading
>     DNSSEC public keys and consequent creation of the DS record.
> 
>     I'm hoping CDS eventually makes this all obsolete.
> 
> Gandi also has a beta implementation of 
>   draft-ietf-regext-dnsoperator-to-rrr-protocol, which requires 
> CDS/CDNSKEY support, and provides registrars with a way to bootstrap 
> DNSSEC ... so you may get your wish sooner than later.

Cool, I did not know that. Good to hear.