Re: Knowledgebase on offline KSK

Bagas Sanjaya <[email protected]> Sat, 31 Jan 2026 06:52:15 +0700

Newsgroups	gmane.network.dns.bind9.user,gmane.network.dns.bind.user
Message-ID	<[email protected]>

On Thu, Jan 29, 2026 at 03:19:24PM +0100, Matthijs Mekking wrote:
> Hello,
> 
> For users interested in offline KSK, introduced in 9.20.2, we have just
> published a Knowledgebase article on this feature that might be worth a
> read.
> 
> If you have any questions or remarks about it, feel free to reach out.

The article mentions that the KSR is for 7 months and ZSK lifetime is 6 months,
which means that there is one month of window to generate new KSR. On ZSK
rollover during that window, does it imply that when new SKR (from such new
KSR) is loaded, we end up with two ZSKs?

Confused...

-- 
An old man doll... just what I always wanted! - Clara

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list.

signature.asc (application/pgp-signature, 228 B)