[Opendnssec-develop] Multiple views with current OpenDNSSEC (well, almost)
Rick van Rein (OpenFortress)
rick at openfortress.nl
Mon Oct 7 06:39:29 UTC 2013
Hi Jakob / others,
>> Or am I forgetting anything here?
> You also have to sync events such as ds-seen, but other than that I think what you propose might work.
Thsnks for confirming that!
Do you and others see this split-Signer approach as a way that we could officialise, and integrate into OpenDNSSEC? The reason to put off my previous, split-Enforcer based approach was, if I recall correctly, the difficulty of getting it into, notably, the Enforcer.
As for ds-seen and ds-unseen, I thought about these too, and concluded that this was scripted external to OpenDNSSEC and therefore the perfect place to capture local fun. I don't think it would be reasonable to ask the Enforcer to change in this respect.
More information about the Opendnssec-develop