Re: Is inline-signing recommended?

2019-10-18 Thread Daniel Stirnimann
Hello Alessandro, On 18.10.19 19:20, Alessandro Vesely wrote: > Did a better way arrive between 2014 and 2017? What does that warning > mean? The how to in this article manually creates keys or does key rollovers. Most DNS software have automated that part, see for example section Policy

Is inline-signing recommended?

2019-10-18 Thread Alessandro Vesely
Hi all, reading about the various ways to sign zones, inline-signing seems to be the simplest one. However, a 2014 Swiss howto I found has this obscure warning: Update Nov 2017: DNSSEC zone signing as described here is outdated. We strongly recommend against the method described in