Only one DS key comes back in query

[frank picabia]

Perhaps you are unaware of the use of this domain as a generic filler.

https://example.com/

I don't know why so many people assume the DNS information
will be openly shared.  Suppose I was working on a problem for Barclays
Bank, do you suppose they would be thrilled with me posting
their networking innards for the world to see?



On Mon, May 16, 2022 at 1:50 PM Jan-Piet Mens via bind-users <
bind-users at lists.isc.org> wrote:

> >The values in the file dsset-example.com generated by signing the zone
> are not good.
>
> If they are 'not good' then it's possible you are using an outdated dsset
> file. (And you are hiding domain names; I doubt example.com has been
> delegated
> to you.)
>
> dnssec-signzone creates dsset- files when signing a zone
> manually/semi-automatically. If you are signing with, say,
> autodnssec-maintain,
> then no dsset- file is created and you use dnssec-dsfromkey to determine
> the DS
> which you then submit to your parent zone.
>
>         -JP
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
> from this list
>
> ISC funds the development of this software with paid support
> subscriptions. Contact us at https://www.isc.org/contact/ for more
> information.
>
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20220516/1fa1024c/attachment-0001.htm>