feature survey -- bind9 dnssec -- autogenerate missing signatures

[Paul Vixie]

>   Is this still using the .jnl mechanism?

yes.

>   I found that mechanism very brittle when I was trying to do updates.

do tell.  (really.)  (i'm using this happily in hot extensive production.)

>   Given the problem with the secondaries, I think it's better to just
> tell owners of zones with more than 100 RRsets that they have to sign
> the zone the first time once.

noted.