[Opendnssec-develop] KSK rollover - current plan
sion at nominet.org.uk
sion at nominet.org.uk
Tue Nov 10 00:28:04 UTC 2009
> Do you need to use the keytag? Won't the system know which keys we
> are talking about when using either --zone or --policy?
>
> If we must use the keytag, can we handle keytag collisions?
I was thinking that there may be more than one key in the ready state for
any given zone/policy... If there is a keytag collision then I was going to
report back with the cka_ids involved and give the option of either one?
Sion
More information about the Opendnssec-develop
mailing list