[Pdns-users] [Pdns-dev] PowerDNS Authoritative Server 3.3 Release Candidate 1 available

Leen Besselink leen at consolejunkie.net
Tue May 28 09:09:03 UTC 2013


Hi,

> 
>   * commit 496073b: Since 3.0, pdnssec secure-zone has always generated 3 keys:
>     one KSK and two ZSK, with one ZSK active. For most, if not almost all,
>     users, this inactive ZSK is never used. We now no longer generate this
>     useless ZSK. The resulting smaller DNSKEY RRset improves interoperability
>     with certain validators. Closes ticket 824.
> 

Peter, I assume this means it's still in the database and in the pdnssec output, but
PowerDNS won't send it to DNS-clients ?

Have a great day,
	Leen.




More information about the Pdns-users mailing list