Evan Hunt <[email protected]> wrote: > > What should happen is: > > - the old NSEC3PARAM is removed
Isn't that a bit early? Can a secondary transfer the zone while there is no NSEC3PARAM? > - a private-type record is created, indicating that a > new NSEC3 chain is being created > - all the new NSEC3 records are added to the zone > - the new NSEC3PARAM is created I would have thought this should be an atomic replacement of the NSEC3PARAM record. > - all the old NSEC3 records are removed from the zone > - the private-type record is cleaned up Tony. -- f.anthony.n.finch <[email protected]> http://dotat.at/ Malin: Southerly 4 or 5, increasing 6 at times in northwest. Moderate or rough. Fair. Good. _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list [email protected] https://lists.isc.org/mailman/listinfo/bind-users
