On 11 Oct 2018, at 14:07, pg...@dev-mail.net wrote:
Isn't 'hardwired' here afaict. Looking at the ICANN site -- again -- is probably best advice.
Since you're running BIND, https://kb.isc.org/docs/aa-01182 might be more specifically helpful, although I'm not sure that you can recover from the key having actually rolled at this point by just setting "dnssec-validation auto;"
-- Bill Cole
