Evan Hunt <e...@isc.org> wrote:
>
> What should happen is:
>
>  - the old NSEC3PARAM is removed

Isn't that a bit early? Can a secondary transfer the zone while there is
no NSEC3PARAM?

>  - a private-type record is created, indicating that a
>    new NSEC3 chain is being created
>  - all the new NSEC3 records are added to the zone

>  - the new NSEC3PARAM is created

I would have thought this should be an atomic replacement of the
NSEC3PARAM record.

>  - all the old NSEC3 records are removed from the zone
>  - the private-type record is cleaned up

Tony.
-- 
f.anthony.n.finch  <d...@dotat.at>  http://dotat.at/
Malin: Southerly 4 or 5, increasing 6 at times in northwest. Moderate or
rough. Fair. Good.
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to