DNSSEC: Configuring auto-signed dynamic zone HOWTO

Nicholas Wheeler nwheeler at devis.com
Tue Feb 23 20:46:24 UTC 2010


On Tue, 2010-02-23 at 23:40 +0300, Eugene Crosser wrote: 
> (Well, for now the plan is to do it once a year by hand. Then, we'll see...)

For the record, NIST recommends to roll the ZSK every three months, and
the KSK every two years.

Thanks,

  -- Nicholas

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20100223/bc9cc800/attachment.bin>


More information about the bind-users mailing list