Hi, I have a question - did you update the KSK2017 in bind9 package in Wheezy before it became EOL, and did you update the KSK2017 in Jessie? Would it be still possible to update the keys in bind9 package in Wheezy if that hasn’t been done? It seems like it might be causing some operational problems in the wild... Ondrej -- Ondřej Surý ondrej@isc.org