[Opendnssec-develop] Standby KSKs

sion at nominet.org.uk sion at nominet.org.uk
Wed Mar 24 20:39:55 UTC 2010

In the current scheme that I have implemented, standby KSKs do not appear
in the zone itself, they have their DS records in the parent only.

This has a consequence for the auditor, it thinks that there are fewer keys
than the policy is asking for.

My questions are:

Are people happy with this?
If so, should the auditor be patched for this new behaviour before we go to


More information about the Opendnssec-develop mailing list