[Opendnssec-user] Default KASP signature and ZSK lifetime updated

Jakob Schlyter jakob at kirei.se
Wed Apr 18 12:51:55 UTC 2012

Starting with OpenDNSSEC 1.4, we have changed the default signature lifetime to 14 days (was 7 days). We have also changed the default ZSK lifetime to 90 days (was 30 days). Both these changes are the result of a discussion among the OpenDNSSE developers and we believe the new values makes more sense as a default policy.


More information about the Opendnssec-user mailing list