DNSSEC: Configuring auto-signed dynamic zone HOWTO
Nicholas Wheeler
nwheeler at devis.com
Tue Feb 23 20:46:24 UTC 2010
On Tue, 2010-02-23 at 23:40 +0300, Eugene Crosser wrote:
> (Well, for now the plan is to do it once a year by hand. Then, we'll see...)
For the record, NIST recommends to roll the ZSK every three months, and
the KSK every two years.
Thanks,
-- Nicholas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20100223/bc9cc800/attachment.bin>
More information about the bind-users
mailing list