KSK signing zone records

raf bind at raf.org
Mon Aug 30 22:40:05 UTC 2021


On Mon, Aug 30, 2021 at 10:13:05AM -0700, Chris Buxton <clists at buxtonfamily.us> wrote:

> What algorithm(s) are you using for ZSK and KSK? If they’re not the
> same algorithm, then both will be used to sign the entire zone.
> 
> Regards,
> Chris Buxton

Just out of curiosity, why is that?
Isn't having the KSK sign the ZSK enough?
What difference does the nature of the thing
being signed make?

cheers,
raf



More information about the bind-users mailing list