BIND and DNSSEC
Alan Clegg
alan at clegg.com
Thu Nov 1 11:08:10 UTC 2012
On Nov 1, 2012, at 3:02 AM, Kobus Bensch <kbensch at fullnet.co.uk> wrote:
> Thank you for this. Had a look and it seems fairly easy. Not sure if that is a flippant remark.
As the author of this document, I must say thanks. Deploying DNSSEC is not hard.
It's the care and feeding after-the-fact (key rollover) that you must be extremely careful with.
> A question: is implementing dnssec a good enough reason to abandon split horizon DNS?
I'd find any excuse to abandon views/split-horizon.
AlanC
--
Alan Clegg | +1-919-355-8851 | alan at clegg.com
More information about the bind-users
mailing list