Philip Homburg writes: > >Did you see my original response? Proposals for automatic DNSSEC trust > >anchor updating *do* exist. > > Is there any document that deals with the situation where a device has > been in a box for 10 years and then has to bootstrap automatically? > > I'm not aware of any. But maybe there is.
I remember <https://tools.ietf.org/html/draft-wijngaards-dnsext-trust-history-03>. At that time some other proposals were floating around as well. jaap _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
