On Wed, 15 Jul 2020 16:53:14 +0200 Jan-Piet Mens <[email protected]> wrote:
> I have the following signing policy configured in a test environment: > ksk-lifetime: 30m > zsk-lifetime: 2h These settings are insane. You shouldn't have that short lifetime for ksk. Make sure your ksk lifetime is at least multiple times longer than zsk lifetime. -- Tuomo Soini <[email protected]> Foobar Linux services +358 40 5240030 Foobar Oy <https://foobar.fi/> -- https://lists.nic.cz/mailman/listinfo/knot-dns-users
