Project

General

Profile

Enhancement #482

Review DNSSEC key length

Added by Marc Dequènes over 3 years ago. Updated about 1 year ago.

Status:
Resolved
Priority:
High
Category:
Service :: DNS
Start date:
2015-10-20
Due date:
% Done:

100%

Patch Available:
Confirmed:
No
Branch:
Entity:
DuckCorp
Security:
Yes
Help Needed:

Description

The KSK is using type 8 with 2048bits (renewd every year), and ZSK type 8 with 1024bits (renewed every month).

History

#1 Updated by Marc Dequènes over 3 years ago

  • Priority changed from Normal to High

#2 Updated by Marc Dequènes about 1 year ago

  • Status changed from New to Resolved
  • Assignee changed from Pierre-Louis Bonicoli to Marc Dequènes

Switched to type 10 with 4096/2048bits.

I had to use opendnssec from Stretch backports to get fixes around rollover.

#3 Updated by Marc Dequènes about 1 year ago

  • % Done changed from 0 to 100

Also available in: Atom PDF