BIND9 DNSSEC algorithm rollover for inline-signed zone

Jim Popovitch jimpop at gmail.com
Mon Oct 10 21:39:22 UTC 2016


On Mon, Oct 10, 2016 at 7:51 AM, Sebastian Wiesinger
<sebastian at karotte.org> wrote:
>
> http://dnsviz.net/d/blau.beer/V_tTtQ/dnssec/
>
> After the DS TTL expired I removed the old DS, so the zone now looks
> like this:
>
> http://dnsviz.net/d/blau.beer/V_t2Hg/dnssec/
>

TBH, the prior one looks cooler than the later.

-Jim P.


More information about the bind-users mailing list