[Opendnssec-develop] comments in the signed file
Patrik Wallström
patrik.wallstrom at iis.se
Thu Oct 29 08:20:16 UTC 2009
We have a number of added comments in the signed zonefile. It might be
useful for a small zone, but in a large zone I believe it just adds a
lot of unnecessary overhead.
Examples:
se. 172800 IN RRSIG NS 5 1 172800 20091030184655
20091028181011 52338 se.
JhRoDmVZYUMTjACdN4DhDENu6YHQF38LYhEdTADuaMOEFzZUgu1dpahrd2tuq2Od7vJtyZ2xtSB5Seg8Bs1M1sVRVgHTuW5ZD1E
+rcvGeiKgV+yRKnUZCK3HgRWLL1lHIY
+hoplieKsTWYsymI5ulRFQsqZ1Px9Hc35HIGao51k= ;{id = 52338}
0-3.se. 3600 IN DS 58458 5 2
8396798fabde22a1f6fc2966ae5a18bf744927bde512c6b984260552ee45442c ;
xobon-kyvym-zupyt-vemup-cytez-supik-koroh-pyker-zetog-nonor-tanic-
decor-nocad-kecah-dyryg-hacyd-syxex
I think it's ok to have it on the DNSKEY record, but for those above I
really want to disable that output. It is not very useful.
What do you guys think?
--
Patrik Wallström
Project Manager, R&D
.SE (Stiftelsen för Internetinfrastruktur)
E-mail: patrik.wallstrom at iis.se
Web: http://www.iis.se/
More information about the Opendnssec-develop
mailing list