To:
dnssec@cafax.se
From:
Bill Manning <bmanning@isi.edu>
Date:
Tue, 15 Oct 2002 08:43:41 -0700 (PDT)
Sender:
owner-dnssec@cafax.se
Subject:
troubleshooting...
with the existant tools, there is the possiblity that one may resign a zone w/o changing the serial number. one of the common troubleshooting methods is to ensure that all authoritative servers has the same serial number. in this case, the serial number is the same, its the signatures that are distinct. My current thought is to check the expiration time of the the signatures to detect varience in zones, and not depend on a difference between serial numbers. is this realistic? -- --bill