[Pdns-users] Setting up intentionally invalid DNSSEC record in auto-secure environment

[leen at consolejunkie.net]

On 2016-01-06 20:26, Nicholas Williams wrote:
> Yea, but that's the rub. I want to do this WITHOUT 'presigned zones.'
> I want everything else to be live-signed (because it's SO much easier
> than presigning), and only munge this one subdomain's RRSIGs.
>

How about a creating a separate sub-zone with a broken presigned DNSSEC 
?