[Opendnssec-user] GKG.net - is it any good?
Paul Wouters
paul at nohats.ca
Sat Mar 3 17:06:39 UTC 2012
On Sat, 3 Mar 2012, Dick Visser wrote:
> As I'm making my way through the docs and cooking up a policy for my
> domains, I have a few questions.
> I've migrated my cajones.org test domain from GANDI.net to GKG.net, so
> now I can add DS records.
> Has anyone else used this registrar before? Are they any good?
They are very good
http://www.gkg.net/ws/ds.html
> The GKG.net site has a much higher default: 3456000, which is 40 days,
> see attached screendump.
> I filled in 3600 and waited, but now the DS shows up with 86400 in .org:
You can set RRSIG expiry in your json call:
http://www.gkg.net/ws/ds.html#create-ds
URL
https://www.gkg.net/ws/domain/domain.org/ds
Method
POST
Headers
Accept: application/json
Content-Type: application/json
Request Body
{ "digest":"625F055ACB65C8B60AD18B3640062E8C23A5FD89",
"digestType":"1", "algorithm":"3", "keyTag":"12345",
"maxSigLife":"3456000"
The TTL they set to 1 day, probably matching the NS glue.
Paul
More information about the Opendnssec-user
mailing list