[Opendnssec-develop] Default to zero standby keys
Sion Lloyd
sion at nominet.org.uk
Tue Jul 6 13:03:05 UTC 2010
> The usage of standby keys is a little bit complicated, and possibly
> something that you use when you now more about DNSSEC. Should we change
> the "default" value in kasp.xml to zero?
This is certainly the case for KSKs; I can write more documentation if that
will help.
Is there actually any point in having standby keys set if you can not select a
different HSM for these keys?
I am happy for the default to be set to zero regardless of the answer to the
above.
Sion
More information about the Opendnssec-develop
mailing list