[dns-operations] Requesting insight about a RRSIG expiration/renewal issue
Viktor Dukhovni
ietf-dane at dukhovni.org
Mon Jul 3 21:12:10 UTC 2017
On Mon, Jul 03, 2017 at 03:21:31PM -0400, Phil Pennock wrote:
> Meanwhile I too have issues elsewhere with Bind DNSSEC auto-signing
> breaking a zone once or twice per year. So I've got "move those to
> scripted manual signing" on my plate.
For me, BIND's unattended re-signing works well enough, with
monitoring catching the very rare glitches. It would be even better
if the underlying issue were identified and resolved.
--
Viktor.
More information about the dns-operations
mailing list