I honestly don’t remember the reasoning, only the outcome. Maybe Mark or someone else from ISC can shed some light? I couldn’t find the answer to this regular (but infrequent) question in the ISC KB.
Regards, Chris Buxton > On Aug 30, 2021, at 3:40 PM, raf via bind-users <bind-users@lists.isc.org> > wrote: > > On Mon, Aug 30, 2021 at 10:13:05AM -0700, Chris Buxton > <cli...@buxtonfamily.us> wrote: > >> What algorithm(s) are you using for ZSK and KSK? If they’re not the >> same algorithm, then both will be used to sign the entire zone. >> >> Regards, >> Chris Buxton > > Just out of curiosity, why is that? > Isn't having the KSK sign the ZSK enough? > What difference does the nature of the thing > being signed make? > > cheers, > raf > > _______________________________________________ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users
signature.asc
Description: Message signed with OpenPGP
_______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
