Re: Question about cache reload

2013-07-23 Thread Lawrence K. Chen, P.Eng.
- Original Message - > Firstly you should not use NSEC3 unless you NEED to use NSEC3, NSEC > is more than sufficient for most zones. NSEC3 is more expensive > for both servers and clients. 99.999% of zones (forward and reverse) > DO NOT need to use NSEC3. They derive NO benefit from N

Re: Question about cache reload

2013-07-23 Thread Lawrence K. Chen, P.Eng.
- Original Message - > I have just set up DNSSEC on bind 9.9.3. I had set up the zone and > put a DS record out at the registrar. Several days later I found > that I had set up the keys incorrectly using only NSEC verses NSEC3 > so i changed the keys. I deleted the old keys and DS reco

Re: Question about cache reload

2013-07-22 Thread Mark Andrews
In message , Stanley We ilnau writes: > I have just set up DNSSEC on bind 9.9.3. I had set up the zone and put a DS > record out at the registrar. Several days later I found that I had set up th > e keys incorrectly using only NSEC verses NSEC3 so i changed the keys. I del > eted the old keys

Question about cache reload

2013-07-22 Thread Stanley Weilnau
I have just set up DNSSEC on bind 9.9.3. I had set up the zone and put a DS record out at the registrar. Several days later I found that I had set up the keys incorrectly using only NSEC verses NSEC3 so i changed the keys. I deleted the old keys and DS record, and had bind resign everything a