anonymous said: "who controls the keys?" dc396 said: "Indeterminate at this time (at least I am unaware of any decision regarding who holds the root KSK). How is that relevant to systematic revision to the root management procedure?" So is this an open question - using a single KSK or multiple KSKs for signing the root? Seems the later would make a big procedural and technical difference in root zone management.