On Wed, 11 Mar 2009, Mark Andrews wrote: > > In message <[email protected]>, Matt Larson writes: > > Mark, > > > > On Wed, 11 Mar 2009, Mark Andrews wrote: > > > [...] it is impossible to convert a DS to a DNSKEY prior to the > > > publication of the DNSKEY in the DNS. > > > > Why would a validator ever need to do this? > > Because it makes it possible to change DNSKEYs without > having to have both the old and new key present in the zone > at the same time.
I don't see it. Please explain further. Matt _______________________________________________ DNSOP mailing list [email protected] https://www.ietf.org/mailman/listinfo/dnsop
