Hi,
I have just a quick information from DNSSEC movement in .cz. Next
Tuesday we will start our first KSK rollover for .cz domain. We decided
to chose stronger algorithm RSASHA512 and to switch from NSEC to NSEC3.
That means we have to follow procedure for algorithm rollover as
described in
http:/
A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Domain Name System Operations Working Group of
the IETF.
Title : DNSSEC Policy & Practice Statement Framework
Author(s) : F. Ljunggren, et al.