tree 4aecf823ae0af8d4d5bff5194f61c422b0637292
parent 9beb4d9ea20da868800a32b82b7343f65e4982ec
author Simon Kelley <simon@thekelleys.org.uk> 1594572205 +0100
committer Simon Kelley <simon@thekelleys.org.uk> 1594572205 +0100
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEE1urL1u5GuDQkjRESFc3aauGRNaIFAl8LPekACgkQFc3aauGR
 NaLDcQ/7B4xZpEA+ZH/6aP6pVsRfd88nrLLYiZzClGSHYQuqzBjEk0q/soub3tt+
 BquWKk1YFa2RIT0/BwvQvCMJIwdj6qupr1B+pNn+LRS2yGRfCjGfcXAc6plN72CS
 jWB1fKfBBXSFSAyi7BYuVPESsj6t0hVYYzWLZk9d3OQzSFd6Rq4XlpdZxNRySgMH
 ydR/6TTTo6D8t3xJ/TRopRlnHNldJxnpL26VyRWPp+y800a9UD3ZhGwSU4fWPtxK
 TXFooj7VIuxshsOhvSZQ+JoYXurAmm1GReo0kbivJFDOV10HBOYV8JjsVo/lYwPV
 YqDBKygnaShbFhk076bf39ICBSyZiIXCJqfrndFwfRnENjrYkaYgRemoXDrrrbmh
 DOCYtUCtdAMrdNVIKaLfyJxzj6L/ylXeByjPV381W6jjd7Q58Y68frvkBLflH1+b
 XSJslJOE0nM7HevhsaB6H1CmACBJ/5eTMn4d1DR+y1OujUiHUC1vcdDmTUhMqy5b
 YCXgTpfn/BG+4OqhKIFYO1EdCCQ+rDdmLfeFGw+gukrG+WDwpulFOmy61IwzJahX
 VUNQqw+3PndG7q1G7NjjVD68WNF7m1+NcLieUPUn9EepQ8X3M2q3cXmX8bQ5Evf6
 vZjnsU1Tk3nCFf4/MXNHieO8DiLthPk6SrxNEGlvLj7Y9sERKrQ=
 =XVr7
 -----END PGP SIGNATURE-----

Apply floor of 60s to TTL of DNSKEY and DS records in cache.

Short TTLs and specifically zero TTLs can mess up DNSSEC validation.