[Opendnssec-user] [cet1 at cam.ac.uk: (Unvalidatable)ZSK rollover on the root zone has ?started]

Mathieu Arnold mat at mat.cc
Mon Mar 22 16:07:35 UTC 2010



+--On 22 mars 2010 08:29:31 -0700 Jakob Schlyter <jakob at kirei.se> wrote:
| On 22 mar 2010, at 06.52, Stephane Bortzmeyer wrote:
| 
|> There is a <Jitter> for signatures but not for rollovers, no?
| 
| correct, there is no such thing and I'm not sure there is actually a need
| for this.

Well, I don't really see a reason to add a jitter for ZSK rollover, unless
you're looking to spread the cpu load across the time.

As for the KSK, for now, it still needs a manual intervention, which could
be used as a jitter.

-- 
Mathieu Arnold



More information about the Opendnssec-user mailing list