Flexible and Robust Key Rollover in DNSSEC Paper describing the OpenDNSSEC Enforcer NG design, presented at SATIN 2012. Related links: PDF publication