Re: [knot-dns-users] Some issues with dnssec signed domain.

Huh, maybe I've found an error - I copied to knot unsigned zone (but named signed it before and propagate it as a .signed zone). But knot signed the unsigned zone and propagate it as knot's signed zone has a diferent lifetime - SOA record. See "http://dnsviz.net/d/fnhk.cz/UzKZgg/dnssec/". As I can see, there are two signs of SOA records. One "older", that was signed by bind on Monday that is somewhere in the dns cache. Second, "newer" SOA record is Knot's signing from today. So I thing that the problem disapears after record's lifetime. Is it right ? But how to prevent this "double" record problem ? Or did I've use Bind's signed zone for Knot ? Thanks and best regards Josef Karliak.