> The current ZSK is 44538 > > ; This is a zone-signing key, keyid 44538, for ksu.edu. [...] > ; Revoke: 20131202090000 (Mon Dec 2 03:00:00 2013)
The revoke bit has no defined meaning for a ZSK. It's used for updating trust anchors via RFC 5011. The code allows you to set it (just as it allows you to use a ZSK as a KSK), but I don't recommend it. Unless there are resolvers that have managed-key trust anchors configured for ksu.edu, you shouldn't bother with the revoke bit for your KSK either. -- Evan Hunt -- e...@isc.org Internet Systems Consortium, Inc. _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
