[Opendnssec-develop] Running with no policies
Rick van Rein
rick at openfortress.nl
Tue Sep 21 10:58:10 UTC 2010
> In the kasp.rnc file we specifically say that we require one or more
> policies... Can anyone think why we have that, or think of a reason why I
> shouldn't change it to zero or more?
Zero _zones_ for a policy is a logical consequence of supporting subscriptions
by members. But zero policies? No, I think you want to be able to pickup
parameters like key sizes, and could not possible run OpenDNSSEC without it?
More information about the Opendnssec-develop