[Opendnssec-develop] Default to zero standby keys

Sion Lloyd sion at nominet.org.uk
Tue Jul 6 13:03:05 UTC 2010

> The usage of standby keys is a little bit complicated, and possibly
> something that you use when you now more about DNSSEC. Should we change
> the "default" value in kasp.xml to zero?

This is certainly the case for KSKs; I can write more documentation if that 
will help.

Is there actually any point in having standby keys set if you can not select a 
different HSM for these keys?

I am happy for the default to be set to zero regardless of the answer to the 


More information about the Opendnssec-develop mailing list