On Nov 1, 2012, at 7:34 AM, Tony Finch <dot at dotat.at> wrote: > I recommend using "auto-dnssec maintain" so named keeps the zone signed, > instead of dnssec-signzone. I do as well, and this will be documented in the next version of this document. AlanC -- Alan Clegg | +1-919-355-8851 | alan at clegg.com