DNSSEC: maintain mode with KSK offline?

[Diego Martínez]

Hi,

if I use bind with zone options:
        auto-dnssec: maintain
        inline-signing: yes

the KSK (public and private parts) must be on-line, right?
Even if not required to sign the DNSKEY records?




Thanks,
best regards.
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users