[dns-operations] Blog post about configuring BIND 9 with the trust anchor

[Olafur Gudmundsson]

On 17/07/2010 3:31 AM, Michael Graff wrote:
> On 7/17/10 1:39 AM, Doug Barton wrote:
>> On Sat, 17 Jul 2010, Randy Bush wrote:
>>
>>>> http://www.isc.org/community/blog/201007/using-root-dnssec-key-bind-9-resolvers
>>>>
>>>
>>> the alg (8) for the root key in your blog entry is not supported in bind
>>> 9.6.1-P1
>>
>> The fact that you need 9.6.2+ to get alg 8 support is a known issue, but
>> it's probably better if the blog entry says so.
>
> Ahh, I'll correct that tomorrow.  I don't trust editing after a 10 hour
> car trip.
>

You really need 9.7++ as 9.6.x does not support RFC5011 and new KSK will 
be published along with the RFC5011 procedure when the time comes.

	Olafur