On Mon, 7 Sep 2026 15:58:29 +0200 "Martin Pels (RIPE NCC)" <[email protected]> wrote:
> On 01/09/2026 16:11, Philip Homburg wrote: > > In your letter dated Fri, 28 Aug 2026 09:06:53 +0200 you wrote: > > One thing I didn't try and that I now think of, if the ZSK is lost > > then in theory the KSK could be imported as CSK and then the zone > > can be signed and served normally. > > Interesting idea. If the ZSK signing happens on separate hardware > this trick does assume that it is possible to extract the private key > from the KSK signer, which may not be the case. I think it would be good to say something about this possible path if it can be succesful. -- Stefan Ubbink DNS & Systems Engineer Present: Mon, Tue, Wed, Fri SIDN | Meander 501 | 6825 MD | Arnhem | The Netherlands T +31 (0)26 352 55 00 https://www.sidn.nl
pgp_VOZAWvmGY.pgp
Description: OpenPGP digital signature
_______________________________________________ DNSOP mailing list -- [email protected] To unsubscribe send an email to [email protected]
