[Opendnssec-user] PublishSafety default value
miek.gieben at sidn.nl
Wed Jan 9 13:12:02 UTC 2013
[ Quoting Antti Ristimäki at 15:10 on January 9 in "[Opendnssec-user] PublishSafety def"... ]
> I've been wondering whether the default value (3600s) for key
> PublishSafety margin is too short. As OpenDNSSEC is usually used as a
Yes, it is...
> I'm not 100% sure but IIRC there have been validation failures that have
> been caused by the signer (not necessarily ODS) calculating too
> optimistic pre-publication intervals without visibility to what is
> actually available in public DNS.
> Any thoughts?
Make it quite a bit longer, who cares, it's only one record. So a couple of
days are maybe a week is much better IMO.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 198 bytes
Desc: Digital signature
More information about the Opendnssec-user