Hi,
I'm currently working on automated KSK rollovers with my registrars
API. I remember a discussion that it's difficult to say if a DS record
can be assumed as seen, because with Anycast DNS you cannot check all
nameservers from your location (or even when using load-balanced
nameservers, you cannot check all nodes). Does anyone know / can
suggest how long after a DS update at the registry I should wait before
I take the DS seen via DNS lookup? E.g. 24 hours?
Regards,
Volker
_______________________________________________
Opendnssec-user mailing list
Opendnssec-user@lists.opendnssec.org
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
