Joe Abley <jab...@hopcount.ca> wrote: > > In that sense the idea of using a single master (which I think is > implied by "primary master" and a name published in a single MNAME > field) is defensibly archaic.
It's quite difficult to have multiple masters and DNSSEC and coherent copies of the zone from all masters - i.e. more effort than just spinning up parallel instances of BIND or Knot in automatic signing mode. The downstream xfer clients will get horribly muddled if you don't spend the effort to ensure the masters are generating the same zone data for the same serial numbers. Easier to have one primary master which can be replaced quickly. Tony. -- f.anthony.n.finch <d...@dotat.at> http://dotat.at/ - I xn--zr8h punycode Fair Isle, Faeroes: Northwest 7 to severe gale 9, occasionally storm 10. Very rough or high. Squally wintry showers. Good, occasionally poor. _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop