[dns-operations] Requesting insight about a RRSIG expiration/renewal issue

[Viktor Dukhovni]

> On Jul 4, 2017, at 5:21 AM, Tony Finch <dot at dotat.at> wrote:
> 
>> For me, BIND's unattended re-signing works well enough, with
>> monitoring catching the very rare glitches.  It would be even better
>> if the underlying issue were identified and resolved.
> 
> Are you using inline-signing?

Yes.

> I'm not aware that my servers have had problems with auto-dnssec maintain
> without inline-signing. (I still use nsdiff | nsupdate to publish changes.)

Not familiar with this combination.

-- 
	Viktor.