You could also switch to using SIG(0) instead of TSIG. The the client can just update the KEY RRset which is stored in the zone.
> On 13 Aug 2021, at 03:49, John Thurston <[email protected]> wrote: > > On 8/12/2021 5:00 AM, Tony Finch wrote: >> i.e. using the "subdomain" rule type instead of "selfsub", so the >> domain name (second foo...) doesn't need to match the keyname (first >> foo...) > > > Yes, indeed. That's the ticket. > Thank you very much, Tony. > > -- > Do things because you should, not just because you can. > > John Thurston 907-465-8591 > [email protected] > Department of Administration > State of Alaska > _______________________________________________ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > [email protected] > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: [email protected] _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list [email protected] https://lists.isc.org/mailman/listinfo/bind-users
