[Opendnssec-user] [cet1 at cam.ac.uk: (Unvalidatable)ZSK rollover on the root zone has ?started]
Mathieu Arnold
mat at mat.cc
Mon Mar 22 16:07:35 UTC 2010
+--On 22 mars 2010 08:29:31 -0700 Jakob Schlyter <jakob at kirei.se> wrote:
| On 22 mar 2010, at 06.52, Stephane Bortzmeyer wrote:
|
|> There is a <Jitter> for signatures but not for rollovers, no?
|
| correct, there is no such thing and I'm not sure there is actually a need
| for this.
Well, I don't really see a reason to add a jitter for ZSK rollover, unless
you're looking to spread the cpu load across the time.
As for the KSK, for now, it still needs a manual intervention, which could
be used as a jitter.
--
Mathieu Arnold
More information about the Opendnssec-user
mailing list