Re: Bind forgets my changes with nsupdate

2023-10-08 Thread Michael Richardson
201907-b...@planhack.com wrote: >> My solution is not to mix dynamic update with other access. Instead, >> I put in CNAMEs in the signed zone to a sub-zone (or other zone) where >> I do exclusive dynamic update. This isn't perfect, but it works well >> enough to allow dns-01 (cer

Re: KASP Rollover = Immediate Loss of DNSKEY (Why Do Inactive Keys Disappear?)

2023-10-08 Thread Mark Andrews
> On 8 Oct 2023, at 02:16, Eddie Rowe wrote: > > When performing a key rollover using the KASP I continue to see the DNSKEY > IMMEDIATELY disappear rather than staying active for the appropriate period > of time with the test zone having a 3 hour TTL. I first encountered this > behavior wit