Deprecation notice for BIND 9.21/9.22+: inline-signing no

Matthijs Mekking matthijs at isc.org
Thu Sep 17 07:26:02 UTC 2026


BIND users,

In line with our deprecation policy, we are notifying the mailing list
about our intent to deprecate 'inline-signing no;'.

This means that in the future, BIND 9 will only be maintaining DNSSEC as 
if inline-signing was enabled.

Users that are currently using DNSSEC signing with inline-signing 
disabled will be provided a tool to convert their zone data so that it 
is ready for inline-signing, with preservation of RRSIG records.

Best regards,

Matthijs


More information about the bind-users mailing list