niclabs / dns-tools

DNS tools for zone signature (file, pkcs11-hsm) and validation, and zone digest (ZONEMD)
MIT License
16 stars 4 forks source link

DS with SHA256 #25

Closed huguei closed 3 years ago

huguei commented 3 years ago

Hi. When I sign a zone the output gives the corresponding DS record with a SHA1 digest. DS with SHA1 is deprecated. Can you please change it to SHA256, or give both DS? Thanks.

eriverosr commented 3 years ago

Now SHA256 is the only and default DS option.