> Yes, now supported. It has been called passthrough. Indeed, also note this is distinct from https://wiki.opendnssec.org/pages/viewpage.action?pageId=10125376#HowdoI...?-StopusingDNSSECforazone Where the enforcer gracefully retracts all keys ans sigs. The signer will strip all dnssec related records from the input zone. Passthrough will leave the input zone untouched.
In the signconf this can be achieved with omitting the <ZSK> and <KSK> sections. //Yuri
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
