DNSSEC: maintain mode with KSK offline?

[Alan Clegg]

On Sep 13, 2013, at 9:03 AM, Evan Hunt <each at isc.org> wrote:

> My real recommendation is, if you need an offline KSK, don't use inline signing. (You can still use
> auto-dnssec.)

Or use an HSM (hard or soft)...

AlanC
-- 
Alan Clegg | +1-919-355-8851 | alan at clegg.com

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20130913/baf65b15/attachment.bin>