[Pdns-users] Huge PDNS+DNSSEC setup-Need help (Peter van Dijk)

[Peter van Dijk]

Hi,

On Apr 15, 2012, at 15:00 , PARTH MONGA wrote:

> So as you said key rollovers are not mandate,so that means if i created ksk and zsk for a domain so that will last long during a zone lifecycle till its live and secured
> So i am new to dnssec can you please give me the best practice in handling keys like when should i intentionally go for a key rollover and which key is to be rollovered ksk or zsk or both and how frequent.
> Please show some light on this.

You asked the same two days earlier. There's no need to repeat. I cannot provide you with best practices for your organization.

Kind regards,
-- 
Peter van Dijk
Netherlabs Computer Consulting BV - http://www.netherlabs.nl/