On Mon, 4 Oct 2010, Jakob Schlyter wrote: > > Depending on the type of compromise, a RFC 5011 may not be appropriate.
RFC 5011 allows for smooth operation across compromise or loss of the active KSK, or compromise or loss of the backup KSK. Only if both of them are simultaneously lost or compromised do things go horribly wrong. Tony. -- f.anthony.n.finch <[email protected]> http://dotat.at/ HUMBER THAMES DOVER WIGHT PORTLAND: NORTH BACKING WEST OR NORTHWEST, 5 TO 7, DECREASING 4 OR 5, OCCASIONALLY 6 LATER IN HUMBER AND THAMES. MODERATE OR ROUGH. RAIN THEN FAIR. GOOD. _______________________________________________ DNSOP mailing list [email protected] https://www.ietf.org/mailman/listinfo/dnsop
