Skip to content

onlinesign: evolution

Libor Peltan requested to merge onlinesign_evo2 into master
  1. sign only authoritative parts of answer

NSEC is always signed if AA flag is missing, we expect it is a delegation and skip signing NS etc glues are signed iff they come from non-NOTAUTH nodes

  1. some refactoring of dnssec stuff not really related

  2. key rotation for onlinesign

close #558 (closed)

Edited by Daniel Salzman

Merge request reports