Switching key types for authorizing updates

Mark Andrews marka at isc.org
Fri Aug 13 00:13:25 UTC 2021


You could also switch to using SIG(0) instead of TSIG.  The the client
can just update the KEY RRset which is stored in the zone.

> On 13 Aug 2021, at 03:49, John Thurston <john.thurston at alaska.gov> wrote:
> 
> On 8/12/2021 5:00 AM, Tony Finch wrote:
>> i.e. using the "subdomain" rule type instead of "selfsub", so the
>> domain name (second foo...) doesn't need to match the keyname (first
>> foo...)
> 
> 
> Yes, indeed. That's the ticket.
> Thank you very much, Tony.
> 
> --
> Do things because you should, not just because you can.
> 
> John Thurston    907-465-8591
> John.Thurston at alaska.gov
> Department of Administration
> State of Alaska
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: marka at isc.org



More information about the bind-users mailing list