[dns-operations] DNSSEC signatures expired for getdnsapi.org and getdnsapi.net

Viktor Dukhovni ietf-dane at dukhovni.org
Mon Sep 18 07:42:55 UTC 2017


> On Sep 18, 2017, at 3:32 AM, Willem Toorop <willem at nlnetlabs.nl> wrote:
> 
> Oops... Consequence of a too hasty and uncareful software update.
> I just started the signers again.

I'd like to suggest monitoring.  For my own domains, the alarms start
going off 3 days before the signatures are due to expire.  When automatic
re-signing is working correctly no records ever get that close to
expiration.

-- 
	Viktor.




More information about the dns-operations mailing list