I'm happy to say tha .se, .nu and also ripe (for
reverse zones) works with RFC8078 and I have it running so now I do automatic KSK
rollovers 4 times/year.
RFC7477 is also implemented on .se and .nu so I can manage my NS pointers in my local
zones and sync via CSYNC RR, very nice.
/Leif
On Tue, Apr 22, 2025 at 7:32 PM Michael Grimm via knot-dns-users
<knot-dns-users(a)lists.nic.cz <mailto:knot-dns-users@lists.nic.cz>> wrote:
Erwan David <erwan(a)rail.eu.org <mailto:erwan@rail.eu.org>> wrote:
I only have a CDS key in my zone when there is a
KSK rollover. The CDS contains the data you should
add as DS in the parent zone.
I have removed CDS/CDNSKEY completely, because I do not need them for .de, .org, and
.net for the time being.
Regards,
Michael
--
--