Written on March 10, 2010 at 11:41 pm by MyCCIE

Rolling Over DNSSEC

Filed under The Internet Protocol Journal - Cisco {no comments}

It is considered good security practice to treat cryptographic keys with a healthy level of respect. The conventional wisdom appears to be that the more material you sign with a given private key the more clues you are leaving behind that could enable some form of effective key guessing. As RFC4641 states: “the longer a [...]