>>> I recommend "activate" + "publish" at the same time. >> I'd appreciate knowing your reasoning for preferring this > You are going from unsigned to signed. There is no benefit in publishing, > waiting then activating.
The IETF draft "DNSSEC Key Timing Considerations" (http://tools.ietf.org/html/draft-ietf-dnsop-dnssec-key-timing-02) goes into great detail about all of this. This draft document expired on 9/11/2011. Is there a successor document and/or other references that you would recommend on this topic? Thanks. Jeffry A. Spain Network Administrator Cincinnati Country Day School _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
