Re: rndc valid key types

2020-07-07 Thread Evan Hunt
On Tue, Jul 07, 2020 at 04:32:37PM -0700, Gregory Sloop wrote: > I've seen reports that only HMAC-MD5 is the only valid key type. That was the case at one time, but hasn't been for years. > Is there any (security) reason/implications to use something "better" > than MD5? MD5 is broken (as is

rndc valid key types

2020-07-07 Thread Gregory Sloop
So, I've spent some time looking at the man pages and googling without any definitive answer. I'm generating some new rndc keys for my bind9 config. (9.11.3 in this particular case, if it matters.) rndc-confgen has quite a number of options for the key-type - but I'm not sure what BIND9 will