Deprecating DNSSEC algorithms 5 (RSASHA1) and 7 (RSASHA1-NSEC3-SHA1)

[Viktor Dukhovni]

On Sun, Apr 05, 2020 at 03:34:16PM +0200, Hoggins! wrote:

> Le 10/01/2020 à 02:19, Viktor Dukhovni a écrit :
> > If/when you do decide to switch algorithms, please perform the migration
> > with care.  Algorithm rollovers can be tricky.
> 
> Anyone using rollerd? I'd like to upgrade my algorithms and let rollerd
> do the whole rollover job for me, just by specifying that I'd like a
> specific alg to be used on the next shift, but I'm not sure how to do this.

I have never heard of rollerd, but you might do better on a DNS list,
rather than the dane-users list.  Perhaps someone on the dns-operations
list can help.

    https://lists.dns-oarc.net/mailman/listinfo/dns-operations

-- 
    Viktor.