[Opendnssec-develop] ods-kaspcheck requirements

Alex Dalitz AlexD at nominet.org.uk
Tue Dec 6 10:52:18 UTC 2011

>> So our 31 days approximation seem unusual. Maybe change it to 30?
> We had a discussion on this subject quite a while ago, I can't actually find it at the moment. I _think_ that the theory is that if we use 31 days we will never be short.

I don't think we should change the existing behaviour, for backwards compatibility reasons. Existing installations of OpenDNSSEC have been configured against these values, and changing them now would alter the behaviour of existing installations - against the Principle of Least Surprise.


More information about the Opendnssec-develop mailing list