Knowledgebase on offline KSK

Bagas Sanjaya bagasdotme at gmail.com
Fri Jan 30 23:52:15 UTC 2026


On Thu, Jan 29, 2026 at 03:19:24PM +0100, Matthijs Mekking wrote:
> Hello,
> 
> For users interested in offline KSK, introduced in 9.20.2, we have just
> published a Knowledgebase article on this feature that might be worth a
> read.
> 
> If you have any questions or remarks about it, feel free to reach out.

The article mentions that the KSR is for 7 months and ZSK lifetime is 6 months,
which means that there is one month of window to generate new KSR. On ZSK
rollover during that window, does it imply that when new SKR (from such new
KSR) is loaded, we end up with two ZSKs?

Confused...

-- 
An old man doll... just what I always wanted! - Clara
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20260131/6ecc7215/attachment.sig>


More information about the bind-users mailing list