NSEC3/NSEC transition
Mark Andrews
marka at isc.org
Thu Feb 14 22:39:01 UTC 2013
In message <CB52CF69EC353F4FBC9BA1581123C72E1C73DF62 at TORMBXW01.bluecatnetworks.
corp>, David Sherman writes:
> Thank you, Mark
>
> Is it safe to keep -u option for dnssec-signzone in all cases, regardless o=
> f current actual NSEC/NSEC3 chains.
>
> Thanks,
> David
I had forgotten about "-u". Being a appliance vendor you may want to
use it all the time as you have a dashboards etc.
For individuals that are just re-signing a zone, I would say no.
Mark
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
More information about the bind-users
mailing list