2 ms·
For my private domains I use zonesigner from dnssec-tools. No database, no additional daemons, doesn't need to be run on the same machine as the DNS server. It
by spindritf 13y ago
For my private domains I use zonesigner from dnssec-tools. No database, no additional daemons, doesn't need to be run on the same machine as the DNS server. It takes the input zone file and keys; spits out a signed zone file. Couldn't be any simpler.
DNSSEC will IMHO be like IPv6 and it will see some adoption after a long march.