On 15/12/2021 20:18, Chris wrote:
Hi Chris,
[snip config details]
How would I best make this change? Is it enough to
simply change algorithm:
and knot will just do the right thing?
Yes, please! Just change the algorithm and let Knot do its thing. It
will do the right thing. Please do *not* fiddle with things manually.
DNSSEC is complex, and algorithm roll-overs require care. The developers
of Knot have put in a lot of care into handling algorithm roll-overs.
Trust their expertise.
Regards,
Anand