DNSSEC: maintain mode with KSK offline?
Alan Clegg
alan at clegg.com
Fri Sep 13 16:34:05 UTC 2013
On Sep 13, 2013, at 9:03 AM, Evan Hunt <each at isc.org> wrote:
> My real recommendation is, if you need an offline KSK, don't use inline signing. (You can still use
> auto-dnssec.)
Or use an HSM (hard or soft)...
AlanC
--
Alan Clegg | +1-919-355-8851 | alan at clegg.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20130913/baf65b15/attachment.bin>
More information about the bind-users
mailing list