[Opendnssec-develop] comments in the signed file

Patrik Wallström patrik.wallstrom at iis.se
Thu Oct 29 08:20:16 UTC 2009


We have a number of added comments in the signed zonefile. It might be  
useful for a small zone, but in a large zone I believe it just adds a  
lot of unnecessary overhead.

Examples:

se.     172800  IN      RRSIG   NS 5 1 172800 20091030184655  
20091028181011 52338 se.  
JhRoDmVZYUMTjACdN4DhDENu6YHQF38LYhEdTADuaMOEFzZUgu1dpahrd2tuq2Od7vJtyZ2xtSB5Seg8Bs1M1sVRVgHTuW5ZD1E 
+rcvGeiKgV+yRKnUZCK3HgRWLL1lHIY 
+hoplieKsTWYsymI5ulRFQsqZ1Px9Hc35HIGao51k= ;{id = 52338}

0-3.se. 3600    IN      DS      58458 5 2  
8396798fabde22a1f6fc2966ae5a18bf744927bde512c6b984260552ee45442c ;  
xobon-kyvym-zupyt-vemup-cytez-supik-koroh-pyker-zetog-nonor-tanic- 
decor-nocad-kecah-dyryg-hacyd-syxex

I think it's ok to have it on the DNSKEY record, but for those above I  
really want to disable that output. It is not very useful.

What do you guys think?

-- 
Patrik Wallström
Project Manager, R&D
.SE (Stiftelsen för Internetinfrastruktur)
E-mail: patrik.wallstrom at iis.se
Web: http://www.iis.se/






More information about the Opendnssec-develop mailing list