Thank you Mark
Regards,
David
-Original Message-
From: Mark Andrews [mailto:ma...@isc.org]
Sent: February-14-13 5:39 PM
To: David Sherman
Cc: bind-us...@isc.org
Subject: Re: NSEC3/NSEC transition
In message , David Sherman writes:
> Thank you, Mark
>
> Is it safe to keep
In message , David Sherman writes:
> Thank you, Mark
>
> Is it safe to keep -u option for dnssec-signzone in all cases, regardless o=
> f current actual NSEC/NSEC3 chains.
>
> Thanks,
> David
I had forgotten about "-u". Being a appliance vendor you may want to
use it all the time as you have
: NSEC3/NSEC transition
In message , David Sherman writes:
> Hi,
>
> If dynamic signing is used with BIND 9.8, what is the recommended
> procedure t o switch from NSEC3-signed zone to NSEC-signed without
> changing existing DNSK EYs (currently RSA/SHA-512 algorithms are used for
In message , David Sherman writes:
> Hi,
>
> If dynamic signing is used with BIND 9.8, what is the recommended procedure t
> o switch from NSEC3-signed zone to NSEC-signed without changing existing DNSK
> EYs (currently RSA/SHA-512 algorithms are used for both ZSK and KSK)?
> Any specific options
David Sherman wrote:
>
> If dynamic signing is used with BIND 9.8, what is the recommended
> procedure to switch from NSEC3-signed zone to NSEC-signed without
> changing existing DNSKEYs (currently RSA/SHA-512 algorithms are used for
> both ZSK and KSK)? Any specific options for dnssec-signzone?
Hi,
If dynamic signing is used with BIND 9.8, what is the recommended procedure to
switch from NSEC3-signed zone to NSEC-signed without changing existing DNSKEYs
(currently RSA/SHA-512 algorithms are used for both ZSK and KSK)?
Any specific options for dnssec-signzone?
Thanks,
David
___
6 matches
Mail list logo
