dnsext-3----Page:12
1  2  3  4  5  6  7  8  9  10  11  12  13  14  15  16  17  18  19  20  21 

Bootstrapping Implicit Requirements
….
Not necessarily in band
Possibility to use out-of-DNS technology
Not used to maintain the trust anchor set

Note the problem of priming a device that sits in a shrink-wrapped box for a long time before being brought into use
with automated (frequent) rollovers any TAs it had will be stale (and therefore dangerous)
PPT Version