[dns-operations] Requesting insight about a RRSIG expiration/renewal issue

Viktor Dukhovni ietf-dane at dukhovni.org
Mon Jul 3 21:12:10 UTC 2017


On Mon, Jul 03, 2017 at 03:21:31PM -0400, Phil Pennock wrote:

> Meanwhile I too have issues elsewhere with Bind DNSSEC auto-signing
> breaking a zone once or twice per year.  So I've got "move those to
> scripted manual signing" on my plate.

For me, BIND's unattended re-signing works well enough, with
monitoring catching the very rare glitches.  It would be even better
if the underlying issue were identified and resolved.

-- 
	Viktor.



More information about the dns-operations mailing list