Hello, The exitence of an integrated but largely independent zonechecker was contributing significantly to the choice of OpenDNSSEC - so I would miss it dearly if it were to be abandoned.
Retrospectively it never 'saved the day' and had a few false positives, but that is what I expect from a watchdog (and if nothing else it illustrates the accuracy of the code from the signer). This said, if the auditor were to be abandoned completely, it would be most useful to have a hook for an external auditing process, able to halt the publishing process. This is equally true for IXFR based publishing. Best, Gilles -- Fondation RESTENA - DNS-LU 6, rue Coudenhove-Kalergi L-1359 Luxembourg tel: (+352) 424409 fax: (+352) 422473 _______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
