Re: debsuryorg-archive-keyring

Somewhat related to this, the README in the bind.debian.net repository still includes scripting which sets up packages.sury.org as the repository, which no longer exists in the DNS. That could use some cleanup. -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this l

Questions about automatic KSK and using an additional stand-by KSK

I've followed the ARM and the DNSSEC Guide, as well as some ISC KB blog posts. What I got working on BIND 9.18.33: * adding a dnsssec-policy * adding a zone using that dnssec-policy - setting only SOA, NS, and the for NS for a minimal zone * reload zone I got an KSK and ZSK; the zone