Rollover of statically configured resolver keys.

摘要

Key rollovers will be needed for secure deployment of the DNS securityextensions (DNSSEC). From an end-user perspective theserollovers should be transparent i.e. at any point in time an end-usershould be able to verify the chain of trust from a statically configuredsecure entry point.When a zone is being used as the secure entry point for one or moreend-users then a rollover of the keys from that zone will need toresult in a reconfiguration of the keys at the end-user resolvers.We propose a simple polling mechanism that can be used for autoreconfigurationof statically configured keys in end-user resolvers.