ksk in a volume

Phil Mayers p.mayers at imperial.ac.uk
Wed Jun 15 14:26:04 UTC 2011

On Wed, Jun 15, 2011 at 10:51:38AM -0300, Noel Rocha wrote:
>In this situation:
>- KSK signed ZSK(DNSKEY RR).
>- ZSK signing others RR of zone.
>I don't see reason for the KSK be present in operations unless 
>add/delete RR DNSKEY.

Signature expiration.

More information about the bind-users mailing list