Don’t Go Unsigned
At the ICANN 79 DNSSEC & Security Workshop, I gave a talk, with Eric Osterweil, on why you shouldn’t unsign your DNS zone during algorithm rollovers and/or operator changes.
Video recording of the entire panel. My talk is 21 minutes and 25 seconds into the recording.
A separate recording of only our talk is also available.