Robert Edmonds writes: > W.C.A. Wijngaards wrote: > > Unbound 1.6.1rc3 is available: > > https://www.unbound.net/downloads/unbound-1.6.1rc3.tar.gz > > Hi, > > I notice that unbound-anchor from 1.6.1rc3 produces two DSes when run > with "-F" (one for KSK-2010, one for KSK-2017), but it only produces a > single DNSKEY when run without "-F". Is this intentional?
Yes. The key hasn't been published yets, jsut the trust anchors. THe dnskey publication is planned for July. See iana <https://www.iana.org> and the time line at the ksk-rollover pages <https://www.icann.org/resources/pages/ksk-rollover>. jaap
