[DNSOP] Re: Sanity tl;dr for Multi-algorithm DNSSEC Requir ements

Peter Thomassen <[email protected]> Mon, 27 Jul 2026 11:58:21 +0200
Newsgroups gmane.ietf.dnsop
Message-ID <[email protected]>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