Re: State diagram for DNSsec key lifecycle

2012-02-11 Thread Axel Rau
Am 10.02.2012 um 01:57 schrieb Mark Andrews: > You don't submitt the initial DS until the KSK is active and any old > state about the DNSKEY as clear caches. I recommend "activate" + > "publish" at the same time. I see. draft-ietf-dnsop-dnssec-key-timing-02 uses the term 'used for signing' as s

Re: State diagram for DNSsec key lifecycle

2012-02-11 Thread Axel Rau
Am 10.02.2012 um 00:54 schrieb Spain, Dr. Jeffry A.: >> Please comment on this state diagram: >> https://www.chaos1.de/svn-public/repos/network-tools/DNSsec/trunk/dnssec_key_states.pdf > > For greater clarity, I suggest that for the state transitions (captions on > the arrows), you refer specif