[Opendnssec-develop] Running with no policies

Rick van Rein rick at openfortress.nl
Tue Sep 21 10:58:10 UTC 2010


Hey Sion,

> http://www.pivotaltracker.com/story/show/4180085
> 
> In the kasp.rnc file we specifically say that we require one or more 
> policies... Can anyone think why we have that, or think of a reason why I 
> shouldn't change it to zero or more?

Zero _zones_ for a policy is a logical consequence of supporting subscriptions
by members.  But zero policies?  No, I think you want to be able to pickup
parameters like key sizes, and could not possible run OpenDNSSEC without it?

Cheers,
 -Rick



More information about the Opendnssec-develop mailing list