Hi Eric, On 11/08/2017 05:59 PM, Eric Beck wrote: > What I don't understand, is that this particular domain we just secured > today. The RRSIG expiry is 16 Nov. and it says the valid from is Oct. 26. From the last sub-section of https://doc.powerdns.com/md/authoritative/dnssec/#online-signing (named "Signatures"):
> RRSIGs have a validity period, in PowerDNS by default this period starts at > most a week in the past, and continues at least a week into the future. > > Precisely speaking, the time period used is always from the start of the > previous Thursday until the Thursday two weeks later. This two-week interval > jumps with one-week increments every Thursday. Stay secure, Peter -- OpenPGP Fingerprint: 7963 D427 FD32 AC6F D20F D0B1 EFD6 143A 3EF2 2D2F deSEC https://desec.io/ Vertreten durch: Dr. Peter Thomassen, Nils Wisiol
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users
