Victor as this is going to be an Async operation this is the ONLY right order of execution. As presence of an algorithm in DS set is a “contract” that the zone is signed by that algorithm, now that 8 has been removed from the DS set it can next be removed from the DNSKEY set and then the RRSIG’s can be deleted.
Olafur > On Nov 27, 2020, at 6:37 PM, Viktor Dukhovni <[email protected]> wrote: > > > Things were going great for the .ie 8 -> 13 rollover, but > now the algorithm 8 KSK appears to be gone prior to the > removal of the algorithm 8 DS... > > Most resolvers will let this slide, but there could be some > spots of trouble... > > -- > Viktor. > > _______________________________________________ > dns-operations mailing list > [email protected] > https://lists.dns-oarc.net/mailman/listinfo/dns-operations _______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations
