|
|
[satin2012-Schaeffer.pdf](uploads/bf823aaa63dd4d256af4b5a9ce52bb21/satin2012-Schaeffer.pdf)# DNSSEC Key and Signing Policy
|
|
|
# DNSSEC Key and Signing Policy
|
|
|
|
|
|
A DNSSEC key and signing policy (KASP) defines a DNSSEC policy that can be
|
|
|
applied to one or more zones.
|
... | ... | @@ -7,6 +7,12 @@ For some background information, see: |
|
|
|
|
|
https://www.ietf.org/archive/id/draft-mekking-dnsop-kasp-00.txt
|
|
|
|
|
|
# Key manager
|
|
|
|
|
|
The key manager uses the "Flexible and Robust Key Rollover" to ensure DNSSEC correctness.
|
|
|
|
|
|
[Flexible and Robust Key Rollover, SATIN 2012](uploads/bf823aaa63dd4d256af4b5a9ce52bb21/satin2012-Schaeffer.pdf)
|
|
|
|
|
|
# History
|
|
|
|
|
|
## DNSSEC in BIND 9
|
... | ... | |