Sorry I just realised that all that waffle about DS records is only
relevant for KSKs (and CSKs), not ZSKs. So please disregard that. :-P
But I think the "rumoured" vs. "omnipresent" thing is still relevant and
is the most likely explanation for why the old ZSK doesn't stick around.
I can
On 29/09/23 12:05, Eddie Rowe wrote:
When I perform a ZSK key rollover the existing ZSK disappears
*immediately* so not sure what I am missing when using the KASP to
manage key rollover. The state for the keys looks good and for this
test I have TTL set to 1 hour.. But why does dig not show
On 28/09/23 10:02, Eddie Rowe wrote:
I am using the nifty feature of the KASP in 9.16.23, but I cannot seem
to locate documentation on how to manually rollover keys in case this
is needed in the future. The documentation is excellent as far as
discussing the steps involved for the manual or
3 matches
Mail list logo
