KSK signing zone records
raf
bind at raf.org
Mon Aug 30 22:40:05 UTC 2021
On Mon, Aug 30, 2021 at 10:13:05AM -0700, Chris Buxton <clists at buxtonfamily.us> wrote:
> What algorithm(s) are you using for ZSK and KSK? If they’re not the
> same algorithm, then both will be used to sign the entire zone.
>
> Regards,
> Chris Buxton
Just out of curiosity, why is that?
Isn't having the KSK sign the ZSK enough?
What difference does the nature of the thing
being signed make?
cheers,
raf
More information about the bind-users
mailing list