Hi,
On 13/05/2026 17:14, Martin Pels wrote:
1. While performing this procedure to recover from an unusable ZSK or
CSK the SOA record of the zone cannot be changed. This is because at the
moment the new DNSKEY gets introduced into the zone, the DNSKEY RRset
cannot be signed with the old, unusable key.
Correction, this should read:
"While performing this procedure to recover from an unusable ZSK or CSK
the SOA record of the zone cannot be changed. This is because at the
moment the new DNSKEY gets introduced into the zone, the _SOA_ RRset
cannot be signed with the old, unusable key."
Kind regards,
Martin
_______________________________________________
DNSOP mailing list -- [email protected]
To unsubscribe send an email to [email protected]
