9 Apr
2024
9 Apr
'24
5:48 p.m.
On 2024-04-09 09:21:55 +0200 (+0200), Kees Meijs | Nefos wrote:
Why not use PowerDNS's automatic signing? It is able to transparently sign zones. [...]
BIND has automatic zone signing as well, for that matter. We use it to sign the zones hosted from the opendev.org name servers. I even use BIND's automatic functionality to provide DNSSEC for the domains I host on my own personal name servers; I've never needed to manually sign any of my zones. -- Jeremy Stanley