[Opendnssec-develop] Proposed KASP changes for 1.4/trunk

[Rick van Rein]

Hello,

> Should we communicate this change to the users list to encourage people to check their own policy? In case folk used the old defaults without noticing.

That is a good idea.  Also, how to make the change on active domains (which
is not the same as changing the policy file AFAIK).  Important would be
how to do this without security-downtime, of course.  Since it involves
(somewhat scary) work, a motivation should be part of it also.

-Rick