On 15/12/2021 20:18, Chris wrote: Hi Chris,
[snip config details]
How would I best make this change? Is it enough to simply change algorithm: and knot will just do the right thing?
Yes, please! Just change the algorithm and let Knot do its thing. It will do the right thing. Please do *not* fiddle with things manually. DNSSEC is complex, and algorithm roll-overs require care. The developers of Knot have put in a lot of care into handling algorithm roll-overs. Trust their expertise.
Regards, Anand -- https://lists.nic.cz/mailman/listinfo/knot-dns-users
