On Tue, Aug 15, 2017 at 09:03:26AM +0200, Thuban wrote: > Hi > since we have nsd and unbound included in base, I was wondering what > tool you use to deal with DNSSEC and sign your zone ? > I use zkt, but your advices would be nice. > > Regards > -- > thuban
I use powerdns from ports as a hidden signer. This also seems relevant: https://dnsreactions.tumblr.com/post/162546373232/adding-useless-cron-jobs-to-an-already-fine-signer -- I'm not entirely sure you are real.