[Opendnssec-user] Default KASP signature and ZSK lifetime updated

Jakob Schlyter jakob at kirei.se
Wed Apr 18 12:51:55 UTC 2012

Previous message (by thread): [Opendnssec-user] Different Default signature validity versus Denial signature validity
Next message (by thread): [Opendnssec-user] Segfaults in ods-ksmutil, part 2
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Starting with OpenDNSSEC 1.4, we have changed the default signature lifetime to 14 days (was 7 days). We have also changed the default ZSK lifetime to 90 days (was 30 days). Both these changes are the result of a discussion among the OpenDNSSE developers and we believe the new values makes more sense as a default policy.

	jakob

Previous message (by thread): [Opendnssec-user] Different Default signature validity versus Denial signature validity
Next message (by thread): [Opendnssec-user] Segfaults in ods-ksmutil, part 2
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

More information about the Opendnssec-user mailing list