I'm actively working on automating KSK rollovers in BIND right now dns.cam.ac.uk/news/2019-01-3โ€ฆ
2
8
23
Right at the moment I am changing BIND so it generates only SHA-256 not SHA-1 DS and CDS records by default.
1
1
4
Because tools.ietf.org/html/draft-ieโ€ฆ
1
1
2
Here's the KSK rollover system compnent diagram I had fun making this afternoon
4
3
2
Replying to @dsilverstone
tasty tasty plants
1