Sign ZSK key permanently

Mark Andrews marka at isc.org
Thu Aug 23 21:10:18 UTC 2018



> On 24 Aug 2018, at 2:05 am, Paul van der Vlis <paul at vandervlis.nl> wrote:
> 
> Hello,
> 
> Is it possible to sign the ZSK key permanently with the KSK key?

No.  There is no way to signal this in a RRSIG.

> If yes:  how to do that?
> 
> In this way I could keep the KSK key offline.
> 
> With regards,
> Paul van der Vlis
> 
> 
> -- 
> Paul van der Vlis Linux systeembeheer Groningen
> https://www.vandervlis.nl/
> 
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: marka at isc.org



More information about the bind-users mailing list