Starting with OpenDNSSEC 1.4, we have changed the default signature lifetime to 14 days (was 7 days). We have also changed the default ZSK lifetime to 90 days (was 30 days). Both these changes are the result of a discussion among the OpenDNSSE developers and we believe the new values makes more sense as a default policy.
jakob
_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
