On Tue, Dec 31, 2013 at 2:40 PM, Dennis Davis <dennisdavis+openbsd-m...@fastmail.fm> wrote: > It's a while since I looked at this, so the exact details are hazy, > but is all this necessary? <snip> > Doesn't seem to me that you need to run unbound-anchor as a part of > /etc/rc.d/unbound. You just need to run it once as part of setting > up unbound. After that a running unbound will periodically check > the root key.
Good question - I've wondered if it was all necessary as well. Although I see it as probably useful. For one, it keeps the user involved housekeeping to a minimum. And my other thought was that in case of a server that was retired for a time and brought back into service that it would be proper for an updated root.key to be installed at startup and without some automation the onus again falls on the user for additional housekeeping.
