Re: [dns-wg] Re: New key-signing keys (KSKs) for RIPE NCC forward and reverse zones

On Tue, 17 Mar 2009, Anand Buddhdev wrote:

The toolset that we're using does not have support for setting the revocation bit, so we won't be setting it.

Are many people actually running resolvers that understand RFC 5011?

Autotrust can update the keys and restart the resolver with the new keys primed for it. This is the setup currently in Fedora-11 Beta. Paul