On 31/10/2013 14:42, Johan Ihrén wrote:
[...]
PS. I've had this discussion with the good folks
at ISC several
times and one response I got (a couple of years ago) was that
the K* files were very useful for debugging. I don't know about
you, but where I am DNSSEC is no longer in the "debugging phase",
it's in the "deployment phase". That has the implication that the
"user interface" should be designed for actually *USING* DNSSEC,
not for debugging it. Exposing K* files to users for debugging
convenience is just plain wrong. Hide the stuff out of sight, please.
+1 to *everything* Johan has said.
Regards,
Anand Buddhdev
RIPE NCC