To: bind9-public@isc.org
From: cathya@isc.org
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
Message-ID: <rt-4.4.1-88549-1507739925-98.0-0-0@isc.org>
Content-Type: text/plain; charset="utf-8"
X-RT-Interface: Web
X-Mailer: MIME-tools 5.508 (Entity 5.508)
Subject: BIND inline un-signer for scrubbing DNSSEC material when slaving
 a signed zone
Date: Wed, 11 Oct 2017 16:38:45 +0000
X-RT-Original-Encoding: utf-8
Content-Length: 231

The use case for this is the need to strip out old DNSSEC material when transitioning a DNSSEC-signed zone between providers - specifically to be able to scrub DNSSEC records from a zone that is being slaved from an external master