[Pdns-users] [Pdns-dev] PowerDNS Authoritative Server 3.3 Release Candidate 1 available
Leen Besselink
leen at consolejunkie.net
Tue May 28 09:09:03 UTC 2013
Hi,
>
> * commit 496073b: Since 3.0, pdnssec secure-zone has always generated 3 keys:
> one KSK and two ZSK, with one ZSK active. For most, if not almost all,
> users, this inactive ZSK is never used. We now no longer generate this
> useless ZSK. The resulting smaller DNSKEY RRset improves interoperability
> with certain validators. Closes ticket 824.
>
Peter, I assume this means it's still in the database and in the pdnssec output, but
PowerDNS won't send it to DNS-clients ?
Have a great day,
Leen.
More information about the Pdns-users
mailing list