tree ffc21a5ff89491983ab00efcc2a511744552b260
parent 83349b8aa4f8667f611918b9189446b0e93fc2bb
author Simon Kelley <simon@thekelleys.org.uk> 1392116842 +0000
committer Simon Kelley <simon@thekelleys.org.uk> 1392116842 +0000

Use DS records as trust anchors, not DNSKEYs.

This allows us to query for the root zone DNSKEY RRset and validate
it, thus automatically handling KSK rollover.