14 Aug
2017
14 Aug
'17
12:20 p.m.
Tony Finch:
The default RRSIG lifetime (in BIND and I think other signers) is 30 days and records are re-signed weekly, so the default expiry time should be about 3 weeks (500 hours).
Tony, could you explain more verbose the relation of "30 days" and "resign one a week" to "a expire time of 3 weeks"? I would like to understand that :-) Andreas