NSEC3 salt lifetime (and some other DNSSEC params): sane value?

Phil Mayers p.mayers at imperial.ac.uk
Tue Sep 21 15:42:56 UTC 2010

On 21/09/10 16:40, Lightner, Jeff wrote:
> I always liken arguments such as this to a leaky boat.   While one
> certainly does more to eliminate the boat filling with water by plugging
> the big holes that does NOT mean there is no value is caulking the small
> ones.  Over time enough of the small ones might be enough to swamp the
> boat.

Well, to each his own.

More information about the bind-users mailing list