Re: KSK-2017 SUAs

2017-09-09 Thread Adam D. Barratt
On Sat, 2017-09-09 at 19:32 +0100, Adam D. Barratt wrote: > On Sat, 2017-09-09 at 14:19 -0400, Robert Edmonds wrote: > > Thanks for writing these! The text mostly looks good to me. The > > only > > nit I have is that I would write "The keys used to authenticate the > > root DNS zone" instead of

Re: KSK-2017 SUAs

2017-09-09 Thread Ondřej Surý
Adam, thanks for writing these. The texts look good to me with (or even without) Robert's changes. On 9 September 2017 20:19:13 Robert Edmonds wrote: Adam D. Barratt wrote: Hi, It's not clear whether there will have been a stretch point release before the KSK rollover

Re: KSK-2017 SUAs

2017-09-09 Thread Adam D. Barratt
On Sat, 2017-09-09 at 14:19 -0400, Robert Edmonds wrote: > Thanks for writing these! The text mostly looks good to me. The only > nit I have is that I would write "The keys used to authenticate the > root DNS zone" instead of "The keys used to [sign] the root DNS > zone[s]". > Technically, there

Re: KSK-2017 SUAs

2017-09-09 Thread Robert Edmonds
Adam D. Barratt wrote: > Hi, > > It's not clear whether there will have been a stretch point release > before the KSK rollover in October, but there definitely won't have > been a jessie point release, and in any case we need to update unbound > in the next couple of days (to avoid new installs

KSK-2017 SUAs

2017-09-09 Thread Adam D. Barratt
Hi, It's not clear whether there will have been a stretch point release before the KSK rollover in October, but there definitely won't have been a jessie point release, and in any case we need to update unbound in the next couple of days (to avoid new installs on stretch having broken DNSSEC