[Opendnssec-user] User input on OpenDNSSEC Auditor deprecation

[Gilles Massen]

Hello,

The exitence of an integrated but largely independent zonechecker was
contributing significantly to the choice of OpenDNSSEC - so I would miss
it dearly if it were to be abandoned.

Retrospectively it never 'saved the day' and had a few false positives,
but that is what I expect from a watchdog (and if nothing else it
illustrates the accuracy of the code from the signer).

This said, if the auditor were to be abandoned completely, it would be
most useful to have a hook for an external auditing process, able to
halt the publishing process. This is equally true for IXFR based publishing.

Best,
Gilles

-- 
Fondation RESTENA - DNS-LU
6, rue Coudenhove-Kalergi
L-1359 Luxembourg
tel: (+352) 424409
fax: (+352) 422473