In the solution space for trust anchor key rollover, there are two
individual Internet drafts:

Implementation work has been done, so that updated software tools are
now available (GPL'ed free software). See

This update includes a complete solution for DNS zone management
procedures (i.e. trust anchor key management and DNS authoritative
nameserver operations), and an API for TAKREM support in DNSSEC-aware
resolver software.

The software development planning aspects are covered in two documents,
respectively for the server side at and the client side at

If the DNSSEC security services are important enough to deserve good
trust anchor key procedures, here they are.



- Thierry Moreau

CONNOTECH Experts-conseils inc.
9130 Place de Montgolfier
Montreal, Qc
Canada H2M 2A1

Tel.: (514)385-5691
Fax: (514)385-5900

web site:

to unsubscribe send a message to with
the word 'unsubscribe' in a single line as the message text body.