Using one key to sign multiple zones (aka key sharing)

Tim Verhoeven tim.verhoeven.be at gmail.com
Wed Oct 13 11:21:34 UTC 2010


Hello,

I've tried to sign multiple zones using the same key. But it seems
that currently Bind does not allow this. Is this a omission or by
design ? I know OpenDNSSEC can do this, and IIRC there is nothing in
the RFC's that disallow key sharing.

Regards,
Tim

-- 
Tim Verhoeven - tim.verhoeven.be at gmail.com - 0479 / 88 11 83

Hoping the problem  magically goes away  by ignoring it is the
"microsoft approach to programming" and should never be allowed.
(Linus Torvalds)



More information about the bind-users mailing list