DNSSEC-Provisioning/music
View on GitHub ↗ ★ 6 Go
Multi-Signer Controller (MuSiC)
4 mentions on Hacker News by 2 people: 0 stories, 4 comments · first 2023-05-30 · latest 2023-10-09
20082026
-
For moving DNSSEC-signed domains, there’s MUSIC: < https://github.com/DNSSEC-Provisioning/music >
comment by teddyh · 2023-10-09 · in Review of the .nz DNSSEC Chain Validation Incident on 29-30 May 2023 [pdf] -
…between .se and .fr. There is also initiatives for tooling that create multi-signing ( https://github.com/DNSSEC-Provisioning/music ), which is to have multiple keys operating for the same domain. Redundancy in HSM's are nice, but…
comment by belorn · 2023-06-01 · in DNSSEC failures are how you get people to disable DNSSEC -
…the solution is to automate the rollovers, so that they can’t be screwed up by manual handling. < https://github.com/DNSSEC-Provisioning/music >
comment by teddyh · 2023-06-01 · in DNSSEC failures are how you get people to disable DNSSEC -
…still being done by hand. It should be automated, and there is some work being done in that area: < https://github.com/DNSSEC-Provisioning/music >
comment by teddyh · 2023-05-30 · in DNSSEC KSK rollover breaks DNS resolution for .nz domains