[dns-wg] Re: DLV and the NCC's KSKs

• Previous message (by thread): [dns-wg] DLV and the NCC's KSKs
• Next message (by thread): [dns-wg] DNSSEC outage in ripe.net and 0.a.2.ip6.arpa

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Anand Buddhdev anandb at ripe.net
Wed Apr 20 11:49:14 CEST 2011

On 20/04/2011 11:22, Jim Reid wrote:

> IIUC the NCC never lodged their KSKs with ISC's DLV thing. Though they
> somehow ended up there and this created some issues later.

This was the main issue. ISC imported the NCC's trust anchors without
asking.

However, we spoke with ISC about this, and resolved it. ISC no longer
imports our trust anchors automatically. Instead, we have an account in
the ISC TAR, and we choose what goes in, and when.

At the moment, we have just 10 islands of trust left in the ISC TAR, and
we're just waiting for their parents to be signed.

Regards,

Anand Buddhdev
RIPE NCC

• Previous message (by thread): [dns-wg] DLV and the NCC's KSKs
• Next message (by thread): [dns-wg] DNSSEC outage in ripe.net and 0.a.2.ip6.arpa

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

[ dns-wg Archives ]