[Pdns-users] Dnssec "front-signing"

[Peter van Dijk]

Hi Ask,

On Jan 18, 2012, at 10:54 , Ask Bjørn Hansen wrote:

> Is there documentation anywhere for enabling "front-signing" (manage dnssec for a zone that is slaved from a dnssec-less master).

Not yet, it seems.

> Or is it as simple as just using secure-zone on a slave zone?

It is that simple. The slavecommunicator inside PowerDNS will do the equivalent of rectify-zone within the slaving transaction.

Kind regards,
Peter van Dijk