Enabling DNSSEC on my domains. @CloudFlare and @gandibar make it shockingly easy :-)
1
1
1
@jogbert I remain unconvinced about how best to handle DNSSEC for Pepperfish but I guess @CloudFlare's solution won't fit my teeny use-case.
2
@dsilverstone Yeah, if you want use your own NS then we aren't right for you. I think PowerDNS makes DNSSEC fairly straightforward though?
1
Replying to @jogbert
@jogbert The big pain is that I keep the zones in git, but don't desperately want to distribute private keys to the NSes. Blurgh

Nov 16, 2015 ยท 9:00 PM UTC

2
Replying to @dsilverstone
@dsilverstone Ah. Well we don't either. We do... special things :-)
1
@jogbert As I would expect of a large installation :-) I'm kinda teeny tiny in comparison :-)
Replying to @dsilverstone
@dsilverstone @jogbert then sign centrally, AXFR signed zones