Is inline-signing recommended?

Daniel Stirnimann daniel.stirnimann at switch.ch
Fri Oct 18 19:48:59 UTC 2019


Hello Alessandro,

On 18.10.19 19:20, Alessandro Vesely wrote:
> Did a better way arrive between 2014 and 2017?  What does that warning
> mean?

The how to in this article manually creates keys or does key rollovers.
Most DNS software have automated that part, see for example section
Policy Configuration:

https://ftp.isc.org/isc/bind9/9.14.7/doc/arm/man.dnssec-keymgr.html

Kind regards,
Daniel


More information about the bind-users mailing list