[Opendnssec-develop] Multiple views with current OpenDNSSEC (well, almost)

Rick van Rein (OpenFortress) rick at openfortress.nl
Mon Oct 7 06:39:29 UTC 2013


Hi Jakob / others,

>> Or am I forgetting anything here?
> 
> You also have to sync events such as ds-seen, but other than that I think what you propose might work.

Thsnks for confirming that!

Do you and others see this split-Signer approach as a way that we could officialise, and integrate into OpenDNSSEC?  The reason to put off my previous, split-Enforcer based approach was, if I recall correctly, the difficulty of getting it into, notably, the Enforcer.

As for ds-seen and ds-unseen, I thought about these too, and concluded that this was scripted external to OpenDNSSEC and therefore the perfect place to capture local fun.  I don't think it would be reasonable to ask the Enforcer to change in this respect.

Cheers,
 -Rick


More information about the Opendnssec-develop mailing list