[Opendnssec-develop] Standby KSKs
sion at nominet.org.uk
sion at nominet.org.uk
Wed Mar 24 20:39:55 UTC 2010
In the current scheme that I have implemented, standby KSKs do not appear
in the zone itself, they have their DS records in the parent only.
This has a consequence for the auditor, it thinks that there are fewer keys
than the policy is asking for.
My questions are:
Are people happy with this?
and
If so, should the auditor be patched for this new behaviour before we go to
v1.1?
Sion
More information about the Opendnssec-develop
mailing list