[Opendnssec-develop] Proposed KASP changes for 1.4/trunk

Rick van Rein rick at openfortress.nl
Wed Apr 18 09:24:12 UTC 2012


> Should we communicate this change to the users list to encourage people to check their own policy? In case folk used the old defaults without noticing.

That is a good idea.  Also, how to make the change on active domains (which
is not the same as changing the policy file AFAIK).  Important would be
how to do this without security-downtime, of course.  Since it involves
(somewhat scary) work, a motivation should be part of it also.


More information about the Opendnssec-develop mailing list