[Opendnssec-user] GKG.net - is it any good?

Paul Wouters paul at nohats.ca
Sat Mar 3 17:06:39 UTC 2012


On Sat, 3 Mar 2012, Dick Visser wrote:

> As I'm making my way through the docs and cooking up a policy for my
> domains, I have a few questions.
> I've migrated my cajones.org test domain from GANDI.net to GKG.net, so
> now I can add DS records.
> Has anyone else used this registrar before? Are they any good?

They are very good

http://www.gkg.net/ws/ds.html

> The GKG.net site has a much higher default: 3456000, which is 40 days,
> see attached screendump.
> I filled in 3600 and waited, but now the DS shows up with 86400 in .org:

You can set RRSIG expiry in your json call:

http://www.gkg.net/ws/ds.html#create-ds

URL
     https://www.gkg.net/ws/domain/domain.org/ds
Method
     POST
Headers

         Accept: application/json
         Content-Type: application/json

Request Body
     { "digest":"625F055ACB65C8B60AD18B3640062E8C23A5FD89",
"digestType":"1", "algorithm":"3", "keyTag":"12345",
"maxSigLife":"3456000"

The TTL they set to 1 day, probably matching the NS glue.

Paul



More information about the Opendnssec-user mailing list