Date: Sun, 08 Jul 2012 14:41:57 -0700 From: Doug Barton <dougb@FreeBSD.org> To: Garrett Wollman <wollman@bimajority.org> Cc: freebsd-security@freebsd.org, FreeBSD Hackers <freebsd-hackers@freebsd.org> Subject: Re: Replacing BIND with unbound (Was: Re: Pull in upstream before 9.1 code freeze?) Message-ID: <4FF9FEA5.7060201@FreeBSD.org> In-Reply-To: <20473.50867.199081.295841@hergotha.csail.mit.edu> References: <CA%2BQLa9B-Dm-=hQCrbEgyfO4sKZ5aG72_PEFF9nLhyoy4GRCGrA@mail.gmail.com> <4FF2E00E.2030502@FreeBSD.org> <86bojxow6x.fsf@ds4.des.no> <89AB703D-E075-4AAC-AC1B-B358CC4E4E7F@lists.zabbadoz.net> <4FF8C3A1.9080805@FreeBSD.org> <0AFE3C4A-22DB-4134-949F-4D05BBFC4C6C@lists.zabbadoz.net> <4FF8CA35.7040209@FreeBSD.org> <4FF8D89B.1030308@bluerosetech.com> <4FF95365.7010605@FreeBSD.org> <20473.50867.199081.295841@hergotha.csail.mit.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
On 07/08/2012 10:43, Garrett Wollman wrote:
> <<On Sun, 08 Jul 2012 02:31:17 -0700, Doug Barton <dougb@freebsd.org> said:
>
>> Neither of which has any relevance to the actual root zone ZSK, which
>> could require an emergency roll tomorrow.
>
> Surely that's why there's a separate KSK. The ZSK can be rolled at
> any time.
The ZSK is rolled on a regular schedule already. But that's irrelevant
to any future need to roll the KSK.
--
This .signature sanitized for your protection
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4FF9FEA5.7060201>