[Opendnssec-user] Database support for OpenDNSSEC

Rickard Bellgrim rickard.bellgrim at iis.se
Tue Nov 16 07:59:22 UTC 2010


On 15 nov 2010, at 22.28, Robert Martin-Legene wrote:

> If the enforcer is supposed to compare the signed and the unsigned
> tables, don't forget that you need some way to ensure that the unsigned
> doesn't change in the period that passes between the signing and the
> enforcer starts, or the enforcer will fail.

s/enforcer/auditor/g

I think that is why the auditor is disabled by Simon. But it is a thing we have to keep in mind. How the auditor should be able to audit the process.

// Rickard




More information about the Opendnssec-user mailing list