Checking ahead of the DNSSEC root KSK rollover ... all my resolvers have a ttl > 24h for the root DNSKEY RRset, so I plan to give them a delicate kick after H-hour to ensure things are OK before I head to Amsterdam tomorrow
3
3
6
Replying to @fanf
I've had to deal with a number of KSK rollovers for the first time in production recently. I only fluffed up one of them (the most important one) :-) I need to see if I can automate GANDI to update the KSKs

Oct 11, 2018 ยท 9:28 AM UTC

2
Replying to @dsilverstone
I have some old half-finished code for talking to their XML-RPC service, but I don't know if that is still a thing after their revamp (I'm gradually moving our non ac.uk domains for stupid biiling reasons)
1
Mmm, I just want a way to send them signed instructions for DNS changes. PGP signed email would be fine :-D
1
more replies
Replying to @dsilverstone @fanf
I understand GANDI is in on CDS/CDNSKEY, should make things easier
2
Ooh nice :-)