NSEC3 salt lifetime (and some other DNSSEC params): sane value?

[Phil Mayers]

On 21/09/10 16:40, Lightner, Jeff wrote:
> I always liken arguments such as this to a leaky boat.   While one
> certainly does more to eliminate the boat filling with water by plugging
> the big holes that does NOT mean there is no value is caulking the small
> ones.  Over time enough of the small ones might be enough to swamp the
> boat.

Well, to each his own.