On Fri, Apr 27, 2012 at 08:40:54AM -0400, wbr...@e1b.org wrote: > We are authoritative for a few dozen small zones. Is it possible to use > the same KSK for all of them? I can see where if it gets compromised we > would need to resign all zones using the KSK at once. How much effort > would I be saving sharing the KSK? > > I'm sure there are plenty of other good reasons not to do this... > Enlighten me!
Don't know about reasons for or against, but Binero AB, a big provider in Sweden, signs thousands of their customers' zones with the same KSK and ZSK. Bill. _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
