On Wed, Jun 15, 2011 at 10:51:38AM -0300, Noel Rocha wrote: >Thanks. > >In this situation: >- KSK signed ZSK(DNSKEY RR). >- ZSK signing others RR of zone. > >I don't see reason for the KSK be present in operations unless >add/delete RR DNSKEY. Signature expiration.