Hello Dave, On Fri, 2021-11-19 at 12:24 +0200, Dave Strydom via Pdns-users wrote: > Is there a way to prevent or disable 'pdnsutil secure-zone' generating the DS > record with the SHA-1 digest type and only generate the SHA-256 and SHA-384?
secure-zone does not generate DSes, it only generates keys. DSes are generated by show-zone, by the API, etcetera, when a user asks for them. Those DSes are not stored by PowerDNS. Now, if your question is, is there a way to prevent show-zone from generating SHA-1 DSes, the current answer is no. Can I ask why you want this? Kind regards, -- Peter van Dijk PowerDNS.COM BV - https://www.powerdns.com/ _______________________________________________ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users