[dns-operations] Don't use dnssec-signzone -g option...

Ondřej Surý ondrej.sury at nic.cz
Tue Sep 16 10:05:03 UTC 2008


2008/9/16 Mark Andrews <Mark_Andrews at isc.org>:
>
>        It is not a bug.  It is documented behaviour.  It allows
>        the presence or absence of a keyset to indicate whether a
>        delegation is secure or not.

Ok, sorry for calling this bug.  But rest of my warning still holds
true: Beware of '-g' - it's not what you may think it is.

Ondrej.
-- 
 Ondřej Surý
 technický ředitel/Chief Technical Officer
 -----------------------------------------
 CZ.NIC, z.s.p.o.  --  .cz domain registry
 Americká 23,120 00 Praha 2,Czech Republic
 mailto:ondrej.sury at nic.cz  http://nic.cz/
 sip:ondrej.sury at nic.cz tel:+420.222745110
 mob:+420.739013699     fax:+420.222745112
 -----------------------------------------


More information about the dns-operations mailing list