DNSSEC online signing current status
I see the following lines in the mod_online documentation for a long time:
Known issues:
The delegations are not signed correctly. Some CNAME records are not signed correctly. The automatic policy-based key rotation does not work. The rotation events are invoked just at server (re)load.
Is this up-to-date information? Where can I read more about the contents of the problems? Maybe I could take something somewhere to help, write something, test something.