diff options
| author | Vladimír Čunát <v@cunat.cz> | 2024-06-20 19:00:58 +0200 |
|---|---|---|
| committer | Vladimír Čunát <v@cunat.cz> | 2024-06-20 19:18:09 +0200 |
| commit | 0a8814545a1e224a7d5eacedfdb0f195e9189f08 (patch) | |
| tree | bb6ca2bbd9c5711d2ba92685b6e98881cea9570c /pkgs/development/python-modules/python-openstackclient/git@git.tavy.me:nixos | |
| parent | 868f39101beff73c62b28383dfab6e61b5ee189e (diff) | |
dns-root-data: add DS for the new KSK-2024
The key still won't be used for some time, two years maybe,
and I've been unable to find the DNSKEY itself yet,
but I think it's better to preemptively trust at least the DS already.
(outdated machines, etc.)
Some evidence that it's not just a hash of *my* private key:
https://www.iana.org/dnssec/ceremonies/53-2
https://data.iana.org/ksk-ceremony/53-2/kskm-keymaster-20240426-173035-995.log
https://www.youtube.com/live/gw4PFhtnVpk?si=C8zevM3nG9O0XAJr&t=12726
I also used exactly the same root.ds in knot-resolver upstream:
https://gitlab.nic.cz/knot/knot-resolver/-/merge_requests/1556
Diffstat (limited to 'pkgs/development/python-modules/python-openstackclient/git@git.tavy.me:nixos')
0 files changed, 0 insertions, 0 deletions