Dan,
              there is no requirement to re-sign every record to achieve
        your 1 day expiry.  Just change the zone key whenever you change
        zone data and have a 1 day expiry on the zone key's signature.

        So daily you re-sign two RRsets. 

        Mark
--
Mark Andrews, Nominum Inc.
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: [EMAIL PROTECTED]
--------------------------------------------------------------------
IETF IPng Working Group Mailing List
IPng Home Page:                      http://playground.sun.com/ipng
FTP archive:                      ftp://playground.sun.com/pub/ipng
Direct all administrative requests to [EMAIL PROTECTED]
--------------------------------------------------------------------

Reply via email to