On 08/02/2018 14:18, Edward Lewis wrote:

> I am not saying this theory has been put to the test, but it is
> compelling.  This hypothesis is in the ICANN deck on the KSK rollover
> used throughout 2017 (until the postponement).

Another hypothesis is configurations where the directory in which BIND
is looking for its files is not writable, preventing saving of the
updated keys.

Some O/S vendors do ship their BIND packages configured this way by
default :(


DNSOP mailing list

Reply via email to