dnssec revision c81bf797a812236e4a6d13a6473bc029d7ce280a
8cf4b2775b5b6960360ae9a2cf3fdd365e536a71Stephen GallagherDNSSEC Release Notes
1f7573f8c74ff0f488a15969caed13034a95bd0fStephen GallagherThis document summarizes the state of the DNSSEC implementation in
80a746e4c2f5168794bd8747db01e25c0b16d876Stephen Gallagherthis release of BIND9.
80a746e4c2f5168794bd8747db01e25c0b16d876Stephen GallagherKey generation and signing
1f7573f8c74ff0f488a15969caed13034a95bd0fStephen GallagherThe tools for generating DNSSEC keys and signatures are now in the
1f7573f8c74ff0f488a15969caed13034a95bd0fStephen Gallagherbin/dnssec directory. Documentation for these programs can be found
bfbf5cb0f00c60c0f000f56c282377b13b9a89abSumit BoseThe random data used in generating DNSSEC keys and signatures
bfbf5cb0f00c60c0f000f56c282377b13b9a89abSumit Bosecurrently contains a significant pseudo-random component and is
a098b26a2a902cfb2968ca44604f61bf000d8413Stephen Gallaghertherefore not cryptographically strong. We do not recommend that keys
a098b26a2a902cfb2968ca44604f61bf000d8413Stephen Gallaghergenerated by the key generation tools in this distribution be used in
78e5b91e6b22efbcd0621144b104ac9dfd487e5bJakub HrozekServing secure zones
0b52717b76bf306afd30bbeb6d6c619365cfb548Stephen GallagherWhen acting as an authoritative name server, BIND9 includes KEY, SIG