On 3/31/25 12:30, Libor Peltan via knot-dns-users wrote:
But what about KSK for my reverse zone and DNSKEY "upload to the registrar"?
I do have the feeling I am missing an important part here ;-)
Uploading your KSKs to your registrar is out of scope for us (unless the
registry supports RFC 7344), because every registrar has this different. But
the process is equivalent for normal and reverse zones.
Or RFC 9615:
https://www.knot-dns.cz/docs/3.4/html/modules.html#authsignal-automatic-authenticated-dnssec-bootstrapping-records
Cheers,
Peter
--
https://desec.io/
--
