procedure for re-signing zones on nsec3param change, when using dnssec-policy full automation?

Thu Oct 20 08:14:00 UTC 2022

On 19. 10. 22 19:48, Mark Andrews wrote:
> Just reload the server.

>> On 20 Oct 2022, at 01:45, PGNet Dev<pgnet.dev at gmail.com>  wrote:

>> with the does the DS record need to be touched? i.e., will the changed to nsec3param change the zone's KSK?

Let me add that no, DS record is not affected at all by NSEC or NSEC3.

-- 
Petr Špaček