Basically OK but a few comments

[Stephane Bortzmeyer <bortzmeyer@xxxxxx>]

> https://www.icann.org/en/system/files/files/root-zone-ksk-rollover-plan-draft-04aug15-en.pdf
>  

I find the ICANN document basically OK but:

* The "communication plan" seems a bit light. This will be _the_ big
problem since the document clearly says that RFC 5011 and software
updates won't be sufficient.

* Among the testbeds, Yeti <https://yeti-dns.org/> is not mentioned.

* About RFC 5011, the ICANN document mentions the risk of
non-implementation and the risk of bad implementation but not the risk
of bad configuration (for instance, the key in a directory where the
daemon cannot write, something current Unbound and BIND packages do
not handle automatically).

* On the governance side, the document only comes from US
organizations (ICANN, Verisign, NTIA)