Hi Anand,
Every time we
switch DNSSEC on for a single zone, it iterates over all
zones (and logs something trivial about each).
What does it log?
info: [ZONE] DNSSEC, signing zone
It's as if it iterates over all signed zones and touches it lightly, but
for many zones this introduces a seconds-long delay (and it seems like a
waste).
-Rick