[Pdns-users] DNSSEC and SOA expire field
Martin Chandler
mchandler at aventer.net
Tue Jul 9 23:42:31 UTC 2013
Hi,
When using PowerDNS for DNSSEC, is there any way to configure the
validity period of the RRSIG records to be greater than the default 2 weeks?
If not, what is the recommended value for the SOA expire field for
DNSSEC enabled zones (I understand it is best to set it to something
less than the RRSIG validity period to avoid signatures expiring before
a zone expires if a slave has connectivity problems with its master)
Thanks,
Martin
--
Cellular phone : 080-4359-8579
e-mail:mchandler at aventer.net
URL :http://www.aventer.net/
More information about the Pdns-users
mailing list