[dns-wg] Re: [db-wg] DNSSEC deployment on the reverse tree.

In the absence of a signed parent domain the trusted-keys will be made available through a secured web page. The keys will only be made available after we start signing the zone in production.

Also see the last part of: http://www.ripe.net/rs/reverse/dnssec/key-maintenance-procedure.html

sigh. and the rirs can not get together and do a ksk system for in-addr.arpa? randy