[Pdns-users] Setting up intentionally invalid DNSSEC record in auto-secure environment

leen at consolejunkie.net leen at consolejunkie.net
Wed Jan 6 19:33:45 UTC 2016

On 2016-01-06 20:26, Nicholas Williams wrote:
> Yea, but that's the rub. I want to do this WITHOUT 'presigned zones.'
> I want everything else to be live-signed (because it's SO much easier
> than presigning), and only munge this one subdomain's RRSIGs.

How about a creating a separate sub-zone with a broken presigned DNSSEC 

More information about the Pdns-users mailing list