botched KSK rollover

Matthew Pounsett matt at conundrum.com
Mon Aug 21 13:23:29 UTC 2017


On 21 August 2017 at 07:18, Phil Mayers <p.mayers at imperial.ac.uk> wrote:

>
> Gandi are another excellent registrar that I can recommend. They have a
> comprehensive API for all their features, including uploading DNSSEC public
> keys and consequent creation of the DS record.
>
> I'm hoping CDS eventually makes this all obsolete.
>
> Gandi also has a beta implementation of
 draft-ietf-regext-dnsoperator-to-rrr-protocol, which requires CDS/CDNSKEY
support, and provides registrars with a way to bootstrap DNSSEC ... so you
may get your wish sooner than later.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20170821/040f0a02/attachment.html>


More information about the bind-users mailing list