State diagram for DNSsec key lifecycle

Mark Andrews marka at isc.org
Fri Feb 10 09:55:35 UTC 2012


In message <92DD72BE-8330-490D-8BF9-7B023FDAB870 at ucd.ie>, Niall O'Reilly writes
:
> 
> On 10 Feb 2012, at 00:57, Mark Andrews wrote:
> 
> > I recommend "activate" + "publish" at the same time.
> 
> 	Mark,
> 
> 	I'ld appreciate knowing your reasoning for preferring this
> 	approach over publication for later activation.
> 
> 	I suspect I might not be alone.  8-)

You are going from unsigned to signed.  There is no benefit in publishing,
waiting then activating.

> 	Best regards,
> 	Niall O'Reilly
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org



More information about the bind-users mailing list