key dir massive
Eric Germann
ekgermann at semperen.com
Thu Dec 22 15:23:26 UTC 2022
> On Dec 22, 2022, at 09:32, Matthijs Mekking <matthijs at isc.org> wrote:
>
>
</snip>
> I hope you have read our KB article on dnssec-policy before migrating:
>
> https://kb.isc.org/v1/docs/en/dnssec-key-and-signing-policy
>
> It should list the main pitfalls to save you a lot of hassle (I suspect you started algorithm rollover immediately when changing to dnssec-policy default).
>
> If there are any things we should add, I am happy to receive your suggestions.
Are there any examples from ISC on how to handle multiple algorithms in the dnssec-policy stanza? I’m running 8 and 13 both as an experiment
Eric
More information about the bind-users
mailing list