[Pdns-users] trying to understand pdns and dnssec
peter at desec.io
Wed Nov 8 17:03:01 UTC 2017
On 11/08/2017 05:59 PM, Eric Beck wrote:
> What I don't understand, is that this particular domain we just secured
> today. The RRSIG expiry is 16 Nov. and it says the valid from is Oct. 26.
From the last sub-section of
> RRSIGs have a validity period, in PowerDNS by default this period starts at most a week in the past, and continues at least a week into the future.
> Precisely speaking, the time period used is always from the start of the previous Thursday until the Thursday two weeks later. This two-week interval jumps with one-week increments every Thursday.
OpenPGP Fingerprint: 7963 D427 FD32 AC6F D20F D0B1 EFD6 143A 3EF2 2D2F
Vertreten durch: Dr. Peter Thomassen, Nils Wisiol
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 819 bytes
Desc: OpenPGP digital signature
More information about the Pdns-users