22 Dub
2025
22 Dub
'25
19:55
I'm happy to say tha .se, .nu and also ripe (for reverse zones) works with
RFC8078 and I have it running so now I do automatic KSK rollovers 4
times/year.
RFC7477 is also implemented on .se and .nu so I can manage my NS pointers
in my local zones and sync via CSYNC RR, very nice.
/Leif
On Tue, Apr 22, 2025 at 7:32 PM Michael Grimm via knot-dns-users <
knot-dns-users(a)lists.nic.cz> wrote:
Erwan David <erwan(a)rail.eu.org> wrote:
I only have a CDS key in my zone when there is a
KSK rollover. The CDS
contains the data you should
add as DS in the parent zone.
I have removed CDS/CDNSKEY completely, because I do not need them for .de,
.org, and .net for the time being.
Regards,
Michael
--