Scripts for zsk rollover in 9.7

Stephane Bortzmeyer bortzmeyer at nic.fr
Tue Feb 23 14:54:38 UTC 2010


On Sat, Feb 20, 2010 at 09:15:23PM +0000,
 Evan Hunt <each at isc.org> wrote 
 a message of 22 lines which said:

> We have plans to improve this in 9.7.x (where x probably equals 1)
> in a couple of ways: first, by making it possible to assign each key
> an explicit successor key and warn the user if a key is set to
> expire without a successor; second, by making it possible to
> configure named itself to generate new keys.

I'm not sure it is a good idea. BIND is already quite loaded in
features. Why not relying on dedicated free software such as
OpenDNSSEC <http://www.opendnssec.org/>?



More information about the bind-users mailing list